JP5381048B2 - Information management apparatus, data processing method thereof, information management system, and computer program - Google Patents

Description

  The present invention relates to an information management device, a data processing method thereof, an information management system, and a computer program, and more particularly to an information management device that manages important information, a data processing method thereof, an information management system, and a computer program.

  In recent years, a number of techniques for protecting rights such as privacy and copyright have been proposed. As this type of technology, Patent Document 1 describes an example of a system for protecting the copyright of a digital asset. The system of Patent Literature 1 stores a digital asset and a digital asset right that defines how the digital asset may be operated to a server, a digital asset, and a digital asset right stored therein. A server that transmits a copy of the received rights database to the receiving device, and a receiving device that permits the operation of the received digital asset only by a technique that conforms to the digital asset rights included in the received rights database.

  The system described in Patent Document 2 is a system for changing the monitoring method in accordance with the sensitivity of a client that handles confidential data, and is used by a user to create and edit confidential data. Confidential data creation and editing means, confidential data management means, confidential data editing means using the confidential data editing means, and data management means for encrypting and decrypting when the predetermined authentication is successful Monitoring means for monitoring an OS event and sensitivity determination means for estimating the usage status of confidential data in real time based on the monitored items.

  Furthermore, the system described in Patent Document 3 has a configuration that calculates the possibility that an individual can be specified in personal information, and conceals it if it is above a threshold, and discloses it if it is below. The disclosure permission determination processing unit in this personal information protection operation service calculates an information gain based on information entropy for the personal information requested to be disclosed, and determines that the anonymity criterion is not satisfied if it is less than a predetermined threshold. Reject the disclosure.

The technique described in Non-Patent Document 1 is a personal information system that takes into account the trade-off between privacy and service quality. Information that uniquely identifies an individual is regarded as information with the highest privacy, and privacy is expressed by the specific probability of the individual, and the relationship between the specific probability and satisfaction with the service is simulated.
JP-T-2004-517377 JP 2007-249304 A JP 2006-350813 A Takahiro Miyamoto et al., “Proposal of Personal Information Control Function Considering Trade-off between Privacy and Service Quality”, [online], May 2, 2005, IEICE 16th Data Engineering Workshop (DEWS2005), Internet [Search June 3, 2008], <http://www.ieice.org/iss/de/DEWS/DEWS2005/procs/papers/6A-o1.pdf>

  In the system described in Patent Document 1 described above, when the restriction of copyright changes due to the update or change of digital assets, for example, when it becomes possible to publish widely with reduced accuracy of moving images, the digital asset rights are changed. There was a problem that it could not be changed.

  Since the system described in Patent Document 2 described above is a system that predicts the confidentiality of the client, there is a problem that when the confidential data itself changes, the change in the confidentiality is not predicted. .

  In the system described in Patent Document 3 described above, the privacy level is handled as “absolute value”, and when important information changes in the process of the system, the importance of the information can be changed accordingly. Not considered. Therefore, it is necessary to obtain a wide variety of sufficient sample results, and it is necessary to actually process the input information to obtain the privacy level of the output information.

  That is, there is a problem that important information cannot be disclosed within an appropriate range in accordance with changes in important information in the process of the system. Originally, when important information changes in the process of the system, for example, when the importance is lowered, it should be disclosed to a wider range and effectively used, and on the contrary, the importance is increasing In that case, the scope of disclosure should be more limited.

  In the system described in Non-Patent Document 1 described above, the privacy expressed by the specific probability is premised on statistically obtained from large-scale data such as a national census, so that the handling users are relatively In a few systems, there is a problem that it is difficult to derive privacy.

  An object of the present invention is to provide an information management apparatus, a data processing method therefor, an information management system, and a computer program that can solve any of the above-described problems.

The first information management device of the present invention inputs first important information, processes the input first important information, and sets an information disclosure level different from the information disclosure level of the first important information. Program receiving means for receiving a program to be output as second important information,
Important information receiving means for receiving the first important information;
Execution means for inputting the first important information and executing the program;
Execution result storage means for associating and storing the input first important information and the output second important information as the execution result of the program when the execution means executes the program;
Calculation means for statistically calculating the degree of change in the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information with reference to the execution result stored in the execution result storage means; ,
Is provided.

The second information management apparatus of the present invention inputs the first important information, processes the input first important information, and sets an information disclosure level different from the information disclosure level of the first important information. Sample input information input as a sample of the first important information to the processing unit of the program having at least one processing unit to output as the second important information having, and when the program is executed, from the processing unit Acquisition means for acquiring sample output information output as a sample of second important information corresponding to the sample input information;
Execution result storage means for storing the sample input information and the sample output information acquired by the acquisition means in association with each other;
Calculating means for statistically calculating the degree of change in the information disclosure level of the sample output information with respect to the information disclosure level of the sample input information with reference to the execution result storage means;

The first information management system of the present invention is:
A collecting means for collecting the first important information;
At least one processing unit that continuously inputs the first important information collected by the collecting unit and outputs the first important information as second important information having an information disclosure level different from the information disclosure level of the first important information. Execution means for executing a program having a plurality of outputs and outputting the second important information;
Execution result storage means for storing the first important information input to the execution means and the second important information output from the execution means in association with each other;
A calculation unit that refers to the execution result storage unit and statistically calculates the degree of change in the information disclosure level of the second important information with respect to the information disclosure level of the first important information;
Control means for controlling the collection means or the execution means in accordance with the degree of change in the information disclosure degree of the second important information.

The second information management system of the present invention is:
An information collecting device for collecting the first important information;
An information management system comprising an information management device connected to the information collection device,
The information collecting device includes:
A collecting means for collecting the first important information;
Providing means for continuously providing the first important information to the information management device;
The first important information is processed to obtain from the information management device the degree of change in the information disclosure level of the second important information having an information disclosure level different from the information disclosure level of the first important information. Acquisition means to
Control means for controlling the providing means according to the degree of change in the information disclosure degree obtained by the obtaining means,
The information management device includes:
Processing for inputting the first important information, processing the input first important information, and outputting the second important information having an information disclosure level different from the information disclosure level of the first important information Program receiving means for receiving a program having at least one section;
Specifying means for specifying the processing unit of the received program;
Important information receiving means for receiving the first important information from the information collecting device;
An execution means capable of executing an arbitrary program;
An execution result storage device capable of storing the execution result of the program in the execution means;
Program code for recording the first important information inputted to the processing unit of the identified program in the execution result, and a second important corresponding to the first important information from the processing unit Generating means for inserting a program code for recording information in the execution result before and after the processing unit of the program, and generating a verification program;
The received first important information is input to cause the execution means to execute the verification program, and the input first important information and the second important information output from the execution means are associated with each other. Storage means for storing the execution result in the execution result storage device;
A calculation unit that refers to the execution result storage device and statistically calculates the degree of change in the information disclosure level of the second important information with respect to the information disclosure level of the first important information;
Have

The third information management system of the present invention is:
An information collecting device for collecting the first important information;
An information management system comprising an information management device connected to the information collection device,
The information collecting device includes:
A collecting means for collecting the first important information;
Providing means for continuously providing the first important information to the information management device;
Obtaining means for obtaining a degree of change in information disclosure degree of second important information generated from the important information from the information management device;
Notification means for notifying the information management device of permission to process the first important information according to the degree of change in the information disclosure level acquired by the acquisition means;
The information management device includes:
The first important information is input, the input first important information is processed and output as the second important information having an information disclosure level different from the information disclosure level of the first important information. Program receiving means for receiving the program having at least one processing unit;
Specifying means for specifying the processing unit of the received program;
Important information receiving means for receiving the first important information from the information collecting device;
An execution means capable of executing an arbitrary program;
An execution result storage device capable of storing the execution result of the program in the execution means;
Program code for recording the first important information inputted to the processing unit of the identified program in the execution result, and a second important corresponding to the first important information from the processing unit Generating means for inserting a program code for recording information in the execution result before and after the processing unit of the program, and generating a verification program;
The received first important information is input to cause the execution means to execute the verification program, and the input first important information and the second important information output from the execution means are associated with each other. Storage means for storing the execution result in the execution result storage device;
A calculation unit that refers to the execution result storage device and statistically calculates the degree of change in the information disclosure level of the second important information with respect to the information disclosure level of the first important information;
Receiving means for receiving a notification of the permission of the processing of the first important information from the information collecting device;
Determining means for determining processing of the first important information or the second important information according to the received notification of the permission;
Control means for executing the determined processing.

The data processing method of the first information management apparatus of the present invention is:
A data processing method for an information management device, comprising:
The information management device includes:
An execution device capable of executing any program;
An execution result storage device that stores an execution result of the program when the execution device executes the program;
The information management device is
A program that inputs first important information, processes the input first important information, and outputs the first important information as second important information having an information disclosure degree different from the information disclosure degree of the first important information. Accept,
Receiving the first important information;
Input the first important information to the execution device to execute the program;
The input first important information and the output second important information are associated with each other and stored in the execution result storage device as the execution result of the program,
The execution result stored in the execution result storage device is referred to, and the degree of change in the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information is statistically calculated.

The data processing method of the second information management apparatus of the present invention is:
A data processing method for an information management device, comprising:
The information management device includes:
An execution device capable of executing any program;
An execution result storage device that stores an execution result of the program when the execution device executes the program;
The information management device is
Gather the first important information,
At least a processing unit that continuously inputs the collected first important information to the execution device and outputs it as second important information having an information disclosure level different from the information disclosure level of the first important information. Executing a program having one, outputting the second important information,
The first important information input to the execution device and the second important information output from the execution device are associated with each other and stored in the execution result storage device,
With reference to the execution result storage device, the degree of change in the information disclosure level of the second important information with respect to the information disclosure level of the first important information is calculated statistically,
The collection of the first important information or the execution of the program of the execution device is controlled according to the degree of change in the information disclosure level of the second important information.

The first computer program of the present invention is:
A computer program for realizing an information management device,
The information management device includes:
An execution device capable of executing any program;
An execution result storage device that stores an execution result of the program when the execution device executes the program;
On the computer,
A program that inputs first important information, processes the input first important information, and outputs the first important information as second important information having an information disclosure degree different from the information disclosure degree of the first important information. Accepting program acceptance procedure,
An important information receiving procedure for receiving the first important information;
An execution procedure for inputting the first important information and causing the execution device to execute the program;
A procedure for storing the input first important information and the output second important information in the execution result storage device as the execution result of the program when the program is executed by the execution device;
A calculation procedure for referring to the execution result stored in the execution result storage device and statistically calculating the degree of change in the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information; Is to execute.

The second computer program of the present invention is:
A computer program for realizing an information management device,
The information management device includes:
An execution device capable of executing any program;
An execution result storage device that stores an execution result of the program when the execution device executes the program;
On the computer,
A collection procedure for collecting the first important information;
The first important information collected by the collection procedure is continuously input to the execution device, and is output as second important information having an information disclosure level different from the information disclosure level of the first important information. An execution procedure for executing a program having at least one processing unit to output the second important information;
A procedure for associating and storing the first important information input to the execution device and the second important information output from the execution device in an execution result storage device;
A calculation procedure for referring to the execution result storage device and statistically calculating the degree of change in the information disclosure level of the second important information with respect to the information disclosure level of the first important information;
The information management system includes the collection procedure or a control procedure for controlling the execution device according to the degree of change in the information disclosure degree of the second important information.

  It should be noted that any combination of the above-described constituent elements and a conversion of the expression of the present invention between a method, an apparatus, a system, a recording medium, a computer program, etc. are also effective as an aspect of the present invention.

  The various components of the present invention do not necessarily have to be independent of each other. A plurality of components are formed as a single member, and a single component is formed of a plurality of members. It may be that a certain component is a part of another component, a part of a certain component overlaps with a part of another component, or the like.

  In addition, although a plurality of procedures are described in order in the data processing method and the computer program of the present invention, the described order does not limit the order in which the plurality of procedures are executed. For this reason, when implementing the data processing method and computer program of this invention, the order of the several procedure can be changed in the range which does not interfere in content.

  Furthermore, the plurality of procedures of the data processing method and the computer program of the present invention are not limited to being executed at different timings. For this reason, another procedure may occur during the execution of a certain procedure, or some or all of the execution timing of a certain procedure and the execution timing of another procedure may overlap.

  According to the present invention, there are provided an information management apparatus, a data processing method thereof, an information management system, and a computer program that can disclose information output by a program that processes important information to an appropriate range.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. In all the drawings, the same reference numerals are given to the same components, and the description will be omitted as appropriate.

(First embodiment)
FIG. 1 is a functional block diagram showing the configuration of the information management apparatus 100 according to the embodiment of the present invention.
The information management apparatus 100 according to the present embodiment inputs the first important information, processes the input first important information, and has a second information disclosure level different from the information disclosure level of the first important information. A program receiving unit 112 that receives a program to be output as important information, an important information receiving unit 118 that receives first important information, an execution unit 120 that inputs the first important information and executes the program, and an execution unit 120 When the program is executed, the execution result storage unit 104 stores the input first important information and the output second important information in association with each other as the execution result of the program, and the execution result storage unit 104 stores the execution result storage unit 104. A calculation unit that refers to the execution result and statistically calculates the degree of change in the information disclosure level of the second important information with respect to the information disclosure level of the first important information.

  In addition, the information management apparatus 100 according to the present embodiment inputs the first important information from the programs received by the program receiving unit 112, processes the input first important information, and processes the first important information. Specific information 114 specifying at least one processing unit (not shown: important information processing unit) to be output as second important information having an information disclosure level different from the information disclosure level, and important information processing of the specified program The program code for recording the first important information input to the execution result in the execution result and the program code for recording the second important information output from the important information processing unit in the execution result A generating unit 116 that inserts the information processing unit before and after the information processing unit and generates a verification program, and the execution unit 120 inputs and accepts the received first important information. Run the use program, save record and the second key information outputted from the first key information entered in association with the execution result respectively in the execution result storage unit 104.

  Furthermore, the information management apparatus 100 according to the present embodiment further includes a presentation unit 122 that presents the degree of change in the information disclosure level calculated by the calculation unit 106 to the user.

  The information management apparatus 100 of the present embodiment includes an important information processing unit that inputs first important information, processes the input first important information, and outputs the second important information having different information disclosure degrees. The information disclosure degree of the second important information obtained by executing the program having at least one using the sample data and processed from the first important information is determined from the information disclosure degree of the first important information before the processing. By quantifying how it changes, it is possible to predict and estimate the degree of change in the degree of information disclosure of the second important information obtained by the important information processing unit of the program from the first important information. . Hereinafter, the degree of change in the second information disclosure level with respect to the information disclosure level of the first important information is referred to as “importance of second important information”.

  Based on the predicted importance of the second important information, the handling policy of the second important information output by the program can be examined, and modification or execution of the program itself can be prohibited.

In the following drawings, the configuration of parts not related to the essence of the present invention is omitted and is not shown.
Each component of the information management apparatus 100 and the information management system to be described later stores a CPU (Central Processing Unit) of an arbitrary computer, a memory, a program that realizes the components of this figure loaded in the memory, and the program. It is realized by an arbitrary combination of hardware and software, mainly a storage unit such as a hard disk and a network connection interface. It will be understood by those skilled in the art that there are various modifications to the implementation method and apparatus. Each figure described below shows functional unit blocks, not hardware unit configurations.

  The information management apparatus 100 according to the present embodiment is realized by, for example, a computer that includes a CPU, a memory, a hard disk, and a communication device (not shown) and is connected to an input device such as a keyboard and a mouse and an output device such as a display and a printer. Can do. Then, the CPU reads out the program stored in the hard disk to the memory and executes it, whereby the functions of the units 104, 106, 112 to 122 can be realized.

  2 and 3 are flowcharts showing an example of the operation of the information management apparatus 100 of this embodiment. The operation of the information management apparatus 100 according to the present embodiment includes a program analysis phase shown in FIG. 2 and a program execution phase shown in FIG.

  The computer program of the present embodiment is a computer program for realizing the information management apparatus 100. The information management apparatus 100 includes an execution unit 120 that can execute an arbitrary program, and the execution unit 120 that executes the program. And an execution result storage device (execution result storage unit 104) for storing the execution result of the program. The first important information is input to the computer (information management device 100), and the input first important information is input. The program acceptance procedure (step S101 in FIG. 2) for accepting the program that outputs the second important information having the information disclosure degree different from the information disclosure degree of the first important information, and accepts the first important information Important information reception procedure (step S111 in FIG. 3), the first important information is input, and the program is executed by the execution unit 120. Execution procedure (step S113 in FIG. 3), when the execution unit 120 executes the program, the input first important information and the output second important information are associated with each other and stored as an execution result of the program. Change in the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information with reference to the procedure stored in the section 104 (step S113 in FIG. 3) and the execution result stored in the execution result storage section 104 The calculation procedure (step S115 in FIG. 3) for statistically calculating the degree (importance) of is described.

  Furthermore, the computer program of this embodiment inputs the 1st important information from the program received in the program reception procedure (step S101 of FIG. 2) in the said computer program, The input 1st important information Specific procedure (step S103 in FIG. 2) for identifying at least one processing unit that outputs the second important information having the information disclosure level different from the information disclosure level of the first important information Program code for recording the first important information input to the processing unit of the program in the execution result, and program code for recording the second important information output from the processing unit in the execution result, Generation procedure (step S105 in FIG. 2) for generating a verification program that is inserted before and after the processing unit, and execution unit 20, the received first important information is input to execute the verification program, the input first important information and the output second important information are associated with each other and recorded in the execution result, and the execution result is stored. It is described that the procedure of saving in the unit 104 (step S113 in FIG. 3) is executed.

  Returning to FIG. 1, in detail, the information management apparatus 100 according to the present embodiment includes an execution result storage unit 104, a calculation unit 106, a program reception unit 112, a specification unit 114, a generation unit 116, and an important information reception unit. Unit 118, execution unit 120, and presentation unit 122.

  The program receiving unit 112 receives an arbitrary program that processes the first important information. As described above, the program inputs at least one important information processing unit that inputs the first important information, processes the input first important information, and outputs the second important information having different information disclosure degrees. Have one.

  The identification unit 114 receives a program from the program reception unit 112 as an input. In the present embodiment, the first important information to be processed by the program may be privacy information that expresses individual privacy, or may be confidential information such as a trade secret.

  The identifying unit 114 analyzes the program and handles important information, for example, a part where the second important information that is abstracted by deleting a part of the first important information is output, or a plurality of first important information The information is integrated into one, and the first important information such as the place to be output as the second important information is input, and the place to output the second important information is specified as the important information processing unit.

  The generation unit 116 inputs an arbitrary program for processing the first important information and the information on the important information processing unit specified by the specifying unit 114 from the specifying unit 114. In the input program, the generation unit 116 converts the first important information and the second important information to the important information processing unit by using a technique such as AOP (Aspect Oriented Programming). (Hereinafter referred to as “execution result”) and a program code for storing in the execution result storage unit 104 is inserted to generate a verification program.

  Specifically, the generation unit 116 records the first important information input to the important information processing unit of the identified program in the execution result, and the second output from the important information processing unit. The program code for recording the important information in the execution result is inserted before and after the important information processing unit of the program to generate a verification program.

  The important information receiving unit 118 receives sample data of the first important information to be verified.

  The execution unit 120 executes the verification program generated by the generation unit 116. The execution unit 120 can also execute an actual program. The execution unit 120 is a programming language compiler and execution system or interpreter. For example, in the case of Java (registered trademark), the execution unit 120 corresponds to a Java compiler and a JVM (Java virtual machine).

  The executing unit 120 inputs the first important information received by the important information receiving unit 118 as sample input information and executes the verification program. By executing the verification program, the output obtained is used as sample output information, and the sample input information and the sample output information are recorded in association with each other and stored in the execution result storage unit 104. When the actual program is executed by the execution unit 120, the execution result storage unit 104 can also store the second important information output from the execution unit 120 as an execution result.

  The execution result storage unit 104 stores the input / output information of the important information processing unit, that is, the execution result recorded by associating the sample input information and the sample output information with each other by the verification program executed by the execution unit 120. . The execution result includes at least the contents of the sample input information and the sample output information and the correspondence between the sample input information and the sample output information.

  The calculation unit 106 refers to the execution result stored in the execution result storage unit 104 and statistically calculates the degree of change in the information disclosure level of the second important information with respect to the information disclosure level of the first important information. To do.

  In the information management apparatus 100 of the present embodiment, the program receiving unit 112 can receive a program including an important information processing unit that extracts first important information and outputs second important information, for example. In this case, the calculation unit 106 can statistically calculate the degree of extraction of the second important information with respect to the first important information.

  At this time, the calculation unit 106 can indicate the importance of the second important information with a lower numerical value as the calculated degree of extraction is larger.

  For example, when one type of second important information is generated for ten types of first important information on average, the probability of specifying an individual is 1/10, and the importance is 1/10. The calculation unit 106 can quantify the importance to 1/10.

  As an example, when the program has an important information processing unit that cuts out a part of the input first important information or classifies it into several groups and outputs it as second important information, The importance of the second important information indicating how much the second important information abstracted with respect to the important information is output can be calculated. In this case, it can be considered that the importance of the second important information becomes lower as the second important information is more abstracted than the first important information.

  Furthermore, the program receiving unit 112 can receive a program having a processing unit that aggregates a plurality of first important information and outputs the second important information. In this case, the calculation unit 106 can statistically calculate the aggregation number of the first important information into the second important information as the degree of aggregation.

  At this time, it may further include a setting reception unit (not shown) that receives a setting indicating whether the importance of the second important information is indicated by a high numerical value or a low numerical value as the calculated degree of aggregation is large. Good. At this time, the calculation unit 106 can indicate the importance of the second important information numerically according to the accepted setting.

  As an example, when the program has an important information processing unit that aggregates the input first important information and outputs the second important information, the second important information depends on the number of the first important information to be aggregated. The importance of can be calculated. It may be considered that the greater the number of first important information that is aggregated, the higher the importance of the second important information that is output, and by mixing many other miscellaneous information, You may consider it less important.

  Note that the process of calculating the importance of the second important information by the calculation unit 106 may be executed every time the execution unit 120 processes one piece of first important information, or some first It may be executed after processing important information. Note that these processing procedures can be changed according to the program and the first important information to be verified.

  The presentation unit 122 presents the result of the calculation unit 106, that is, the importance of the second important information to the user of the information management apparatus 100. For example, the presentation unit 122 outputs the importance of the second important information to an output device such as a display or a printer. Alternatively, the importance of the second important information may be output as data and recorded in various media or storage devices, or may be transmitted to other devices via mail transmission or a network.

  Here, the user may be a provider of the first important information, an administrator of the information management apparatus 100, or a provider of a program executed on the execution unit 120.

  The user can verify the validity of the processing of the important information of the program by referring to the importance of the output information calculated by the calculation unit 106 and confirming whether it matches the assumed importance.

  As a result of verification, if the importance of the actual output information of the sample data is different from the assumed importance, the user can change the storage policy of the output information or cancel the input of the subsequent important information. Thus, it is possible to take measures such as stopping execution of the program or changing the program. Alternatively, the policy for handling the second important information output by the program can be examined.

In the configuration as described above, a data processing method by the information management apparatus 100 of the present embodiment will be described below. Hereinafter, description will be made with reference to FIGS.
The data processing method of the information management apparatus 100 of this embodiment is a data processing method of the information management apparatus 100. The information management apparatus 100 includes an execution unit 120 that can execute an arbitrary program, and the execution unit 120 executes the program. An execution result storage unit 104 that stores an execution result of the program when executed, and the information management apparatus 100 inputs the first important information, processes the input first important information, and performs the first processing. A program that is output as second important information having an information disclosure level different from the information disclosure level of the important information is received (step S101 in FIG. 2), the first important information is received (step S111 in FIG. 3), and executed. The first important information is input to the unit 120 to execute the program (step S113 in FIG. 3), and the input first important information and the output second important information are related. The program execution result is stored in the execution result storage unit 104 (step S113 in FIG. 3), and the execution result stored in the execution result storage unit 104 is referred to. The degree of change in the information disclosure level of the important information is statistically calculated (step S115 in FIG. 3).

  Furthermore, the data processing method of the information management apparatus 100 according to the present embodiment is the data processing method of the information management apparatus 100 described above, in which the first important information is input from the received program, At least one processing unit that processes information and outputs it as second important information having an information disclosure level different from the information disclosure level of the first important information is identified (step S103 in FIG. 2), and the identified program Program processing for recording the first important information input to the processing unit in the execution result and the program code for recording the second important information output from the processing unit in the execution result Are inserted before and after each section to generate a verification program (step S105 in FIG. 2), and the received first important information is input to the execution section 120 for verification. Program is running, stores the entered first record and key information and second key information outputted to the association with the execution result respectively in the execution result storage unit 104 (step S113 in FIG. 3).

  The operation of the information management apparatus 100 configured as described above will be described below. Hereinafter, description will be made with reference to FIGS.

  In the present embodiment, the program analysis phase of FIG. 2 includes a step of generating a verification program for analyzing the program. The program execution phase of FIG. 3 includes a step of predicting the importance of information output by a program based on output information obtained by inputting sample data to a verification program and actually executing the program.

  In the program analysis phase shown in FIG. 2, first, the program receiving unit 112 receives a program to be analyzed (step S101). The identifying unit 114 identifies all locations (important information processing units) that are processing important information from among the programs received by the program receiving unit 112 (step S103).

  Then, the generation unit 116 executes sample input information as input at the start point of each location (important information processing unit) that processes the important information specified by the specifying unit 114 in the program received by the program receiving unit 112. Insert each program code to record in the result, and each program code to record the sample output information to be output in the execution result at the end point of each important information processing part (important information processing unit) By inserting, a verification program is generated (step S105).

  Then, by deploying the verification program generated by the generation unit 116 to the execution unit 120, the program execution phase of FIG. 3 can be started.

  Next, in the program execution phase shown in FIG. 3, first important information is received by the important information receiving unit 118 (step S111). The execution unit 120 executes the verification program generated by the generation unit 116, inputs the first important information received by the important information reception unit 118, and executes the verification program. Second important information for the important information is output, input / output information of each important information processing unit is recorded in the execution result, and stored in the execution result storage unit 104 (step S113).

  The execution result stored in the execution result storage unit 104 is read out by the calculation unit 106, and how much the information disclosure level of the second important information changes compared to the information disclosure level of the first important information. Statistically calculated and the importance of the second important information is predicted (step S115).

  Then, the presentation unit 122 presents the user of the information management apparatus 100 by outputting the importance calculated by the calculation unit 106 to an output device such as a display or a printer (step S117). The user can confirm whether the importance of the second important information is within the assumed range. The user mentioned here may be an administrator of important information, a provider, or a user.

  In this program execution phase, whenever the important information receiving unit 118 receives the first important information as sample input information (step S111), the execution unit 120 executes the verification program, and steps S113 to S117 in FIG. 3 are repeated. It is.

  As described above, according to the information management apparatus 100 of the present embodiment, the second important information and information output by executing the program with respect to the information disclosure degree of the first important information input to the program. The degree of change in the degree of disclosure, that is, the importance can be predicted and presented to the user. Based on the presented information, the user can check whether information having appropriate importance is output. This allows you to evaluate the program, change the design of the program, stop using it, and take these measures as needed as the importance changes while the program continues to be used be able to.

  As described above, according to the information management apparatus 100 of the present embodiment, when the form of the important information changes in the process of the system, the disclosure range can be changed according to the change in importance. Moreover, the information management apparatus 100 of this embodiment can distribute | distribute the important personal information processed with the information management apparatus 100 to a some provider safely, for example.

(Second Embodiment)
FIG. 4 is a functional block diagram showing the configuration of the information management apparatus 200 according to the embodiment of the present invention.
The information management apparatus 200 of the present embodiment is different from the information management apparatus 100 of the above-described embodiment in that the process is determined according to the importance of the important information output by the program.

  In addition to the configuration of the information management apparatus 100 of the above embodiment, the information management apparatus 200 of the present embodiment processes the first important information program according to the degree of change in the information disclosure degree calculated by the calculation unit 106. And a control unit 204 that executes the determined process.

  Note that the information management apparatus 200 of the present embodiment may further include the presentation unit 122 of the information management apparatus 100 of the above-described embodiment of FIG.

  When the determination unit 202 determines processing according to the degree of change (importance) of the information disclosure level, a threshold can be set, and the processing can be determined by comparing the importance with the threshold. It is preferable that the threshold value can be changed by the user as a privacy policy. In addition, a threshold value may be set for each process. That is, the information management apparatus 100 of the present embodiment can further include a setting reception unit (not shown) that receives a setting of a threshold value that determines processing according to the degree of change (importance) of the information disclosure level. The determination unit 202 may determine the corresponding process by comparing the importance calculated by the calculation unit 106 with a threshold value. Thereby, handling of important information can be changed according to the importance.

  The operation of the information management apparatus 200 of this embodiment will be described below. The operation of the information management apparatus 200 of this embodiment is the same as that of the information management apparatus 100 of the above-described embodiment shown in FIG. 2, and the program analysis phase having steps S101 to S105, and the operation of this embodiment shown in FIG. Including a program execution phase of the information management apparatus 200. Hereinafter, a description will be given with reference to FIGS. 4 and 5.

  In the present embodiment, the program execution phase of the information management apparatus 200 of FIG. 5 includes steps S111 to S115 similar to the flow of the information management apparatus 100 of the above-described embodiment shown in FIG. Steps S211 and S213.

In accordance with the importance of the sample output information calculated by the calculation unit 106 in step S115 of the program execution phase of the information management apparatus 200 in FIG. 5, the determination unit 202 determines the processing of the first important information program ( Step S211).
And the process determined by the determination part 202 by step S211 is performed by the control part 204 (step S213).

  As described above, according to the information management apparatus 200 of the present embodiment, since the process can be determined according to the importance of the output information obtained by executing the program, the importance threshold is set in advance. Thus, for example, when importance over the threshold is predicted, as described later, program execution is prohibited, output information from the program is discarded, output is not performed, and output destinations are limited. Can be selectively executed.

(Third embodiment)
FIG. 6 is a functional block diagram showing the configuration of the information management apparatus 210 according to the embodiment of the present invention.
The information management apparatus 210 according to the present embodiment can conceal information to be processed when a program is executed according to importance as an example of the process determined by the determination unit 202 of the information management apparatus 200 according to the above embodiment. Is different.

  The information management apparatus 210 according to the embodiment of the present invention further includes a concealment unit 212 that conceals the second important information in addition to the components of the information management apparatus 200 according to the above-described embodiment of FIG. In accordance with the degree of change in the information disclosure calculated by the unit 106, it is determined whether or not the second important information is to be concealed by the concealment unit 212, and the control unit 204 is determined to be concealed by the determination unit 202. The second important information output from the execution unit 120 is concealed by the concealment unit 212.

  The concealing unit 212 performs, for example, encryption processing of the second important information to conceal the second important information. Only a specific user can be decrypted by the encryption process. For example, when the program executed in the execution unit 120 outputs important information to a network, a database, or the like, the determination unit 202 refers to the importance calculated by the calculation unit 106, and the output information has a certain importance. If, for example, importance higher than the threshold is calculated, it is determined that the concealing unit 212 performs concealment processing of the second important information. It is preferable that the user can also set the threshold value of this embodiment.

  For example, the information management apparatus 210 of the present embodiment includes an output unit (not shown) that outputs the second important information obtained by executing the program by the execution unit 120 and stored in the execution result storage unit 104. In this case, information whose importance is higher than the threshold value can be protected by performing confidential processing such as encryption.

  Here, for example, the output unit may output the second important information to an output device such as a display or a printer. Alternatively, the second important information may be output as data and recorded in various media or storage devices, or may be transmitted to other devices via mail transmission or a network. Alternatively, the execution result storage unit 104 may be accessed from another device via a network to browse the second important information.

  The operation of the information management apparatus 210 of this embodiment configured as described above will be described below. The operation of the information management apparatus 210 of the present embodiment is the same as that of the information management apparatus 100 of the above-described embodiment shown in FIG. 2 in the program analysis phase having steps S101 to S105, and the operation of the present embodiment shown in FIG. And a program execution phase of the information management apparatus 210. Hereinafter, a description will be given with reference to FIGS. 6 and 7.

  In the present embodiment, the program execution phase of the information management apparatus 210 of FIG. 7 includes steps S111 to S115 similar to the flowchart of the program execution phase of the information management apparatus 200 of the embodiment shown in FIG. Steps S221 and S223 described below are included.

  In accordance with the importance of the sample output information calculated by the calculation unit 106 in step S115 of the program execution phase of the information management apparatus 210 in FIG. 7, the determination unit 202 stores the execution result storage unit 104 in the concealment unit 212. It is determined whether or not the second important information is concealed (step S221).

  When it is determined to be concealed (YES in step S221), the concealment unit 212 performs concealment processing of the second important information stored in the execution result storage unit 104 (step S223). finish. If concealment is unnecessary (NO in step S221), the process ends.

  As described above, according to the information management apparatus 210 of the present embodiment, since the output information is secretly output according to the importance of the information output by the program, for example, for highly important information Thus, by performing a concealing process such as encryption and permitting decryption only to an appropriate partner, important information can be distributed and disclosed according to its importance.

(Fourth embodiment)
FIG. 8 is a functional block diagram showing the configuration of the information management apparatus 110 according to the embodiment of the present invention. The information management apparatus 110 of this embodiment is different from the above-described embodiment in that the first important information before execution of the target program and the second important information after execution of the program are acquired from the outside.

  The information management apparatus 110 according to the embodiment of the present invention inputs the first important information, processes the input first important information, and outputs it as second important information having different information disclosure degrees ( Sample input information input as a sample of the first important information to the processing unit of the program having at least one important information processing unit (not shown) and corresponding to sample input information from the important information processing unit when the program is executed An acquisition unit 102 that acquires sample output information that is output as a sample of the second important information, an execution result storage unit 104 that stores the sample input information and the sample output information acquired by the acquisition unit 102 in association with each other, Referring to the execution result storage unit 104, the degree of change in the information disclosure level of the sample output information with respect to the information disclosure level of the sample input information is statistically determined. It includes a calculating unit 106 for output, the.

  FIG. 9 is a flowchart illustrating an example of the operation of the information management apparatus 110 according to the present embodiment. Hereinafter, description will be made with reference to FIGS.

  Sample input information input as a sample of the first important information to the important information processing unit of the program by the acquisition unit 102, and second important information corresponding to the sample input information from the important information processing unit when the program is executed Sample output information output as a sample is acquired (step S11).

  The sample input information and sample output information may be data obtained by executing a program with an execution unit (not shown) included in the information management apparatus 100, or data obtained by executing a program with another execution device. Alternatively, it may be received as a data file from an external storage device or recording medium, or may be received from another execution device or the storage device via a network.

  The sample input information and sample output information acquired by the acquisition unit 102 are stored in association with the execution result storage unit 104 (step S13). The calculation unit 106 statistically calculates the degree of change in the information disclosure level of the sample output information with respect to the sample input information stored in the execution result storage unit 104, that is, the importance of the second important information (step S15). ).

  As described above, according to the information management apparatus 100 of the present embodiment, the importance of information can be calculated based on result data obtained by executing a program using sample data, and verification of the program can be performed. And important information can be processed appropriately.

(Fifth embodiment)
FIG. 10 is a functional block diagram showing the configuration of the information management system 1000 according to the embodiment of the present invention.
The information management system 1000 according to the present embodiment is connected to a manager device 300 having the same configuration as the information management device according to the above-described embodiment, and the manager device 300 so as to be able to communicate with each other via the network 10. And at least one agent device 400 to be provided.

The manager device 300 of this embodiment is different in that it includes a communication unit 302 that communicates with other devices via the network 10 in addition to the same configuration as the information management device 100 of the above-described embodiment of FIG. In the information management system 1000 of the present embodiment, transmission of important information from the agent device 400 to the manager device 300 can be controlled according to the importance predicted by the manager device 300.
In FIG. 10, the same program receiving unit 112, specifying unit 114, and generating unit 116 as those of the information management apparatus 100 of the embodiment of FIG. 1 are not shown.

  Further, the manager device 300 may be configured to further include a communication unit 302 in addition to the same configuration as the information management device 200 or the information management device 210 of the above-described embodiment of FIG. 4 or FIG.

  An information management system 1000 according to the present embodiment includes an information collection device (agent device 400) that collects first important information, and an information management device (manager device 300) connected to the agent device 400. The agent device 400 is a collection unit 404 that collects first important information, a provision unit 406 that continuously provides the first important information to the manager device 300, and processes the first important information. An acquisition unit (reception unit 408) for acquiring the degree of change in the information disclosure level of the second important information having an information disclosure level different from the information disclosure level of the first important information from the manager device 300; And a control unit 410 that controls the providing unit 406 in accordance with the degree of change in the information disclosure level acquired by the unit 408. Also, the manager device 300 inputs the first important information, processes the input first important information, and has the information disclosure degree different from the information disclosure degree of the first important information. A program receiving unit 112 (not shown in FIG. 10) for receiving a program having at least one processing unit to output, a specifying unit 114 (not shown in FIG. 10) for specifying the processing unit of the received program, An important information receiving unit (communication unit 302, important information receiving unit 118) that receives one important information from the agent device 400, an execution unit 120 that can execute an arbitrary program, and an execution result of the program in the execution unit 120 can be stored The first important information input to the execution result storage device (execution result storage unit 104) and the processing unit of the identified program is recorded in the execution result. Program code for recording the second important information corresponding to the first important information from the processing unit in the execution result is inserted before and after the processing unit of the program to generate a verification program Generating unit 116 (not shown in FIG. 10) and the received first important information, causing the execution unit 120 to execute the verification program, and the input first important information output from the execution unit 120 The second important information is disclosed as an execution result in association with the second important information, and the execution result storage unit 104 is referred to, and the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information And a calculation unit 106 that statistically calculates the degree of change in

  Specifically, the manager device 300 is a device that receives and processes important information from a plurality of agent devices 400. The manager device 300 can be configured by, for example, a computer including a CPU, a memory, a hard disk device, and the like.

  The agent device 400 is a device that continuously transmits the first important information to the manager device 300. The agent device 400 includes a communication unit 402, a collection unit 404, a provision unit 406, a reception unit 408, and a control unit 410.

  The agent device 400 can be configured by, for example, an information terminal device including a mobile terminal having a CPU and a memory and a personal computer. For example, the agent device 400 can collect important personal information and continuously provide it to the manager device 300.

  Then, in the manager device 300 and the agent device 400, the CPU implements the functions of the units 104, 106, 118 to 122, 302, and 402 to 410 by reading the program stored in the hard disk into the memory and executing it. can do.

  FIG. 11 is a flowchart showing an example of the operation of the information management system 1000 of this embodiment. The computer program of the present embodiment is a computer program for realizing the information management system 1000. The information management system 1000 includes an execution unit 120 that can execute an arbitrary program, and the execution unit 120 that executes the program. An execution result storage unit 104 for storing the execution result of the program, a collection procedure (step S401) for collecting the first important information in the computer (manager device 300 and agent device 400), A processing unit that continuously inputs the first important information collected by the collection procedure (step S401) and outputs it as second important information having an information disclosure level different from the information disclosure level of the first important information. An execution procedure for executing a program having at least one and outputting second important information Step S113), a procedure for storing the first important information input to the execution unit 120 and the second important information output from the execution unit 120 in association with each other and storing them in the execution result storage unit 104 (Step S113), the execution result A calculation procedure (step S115) for statistically calculating the degree of change (importance) of the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information with reference to the storage unit 104, the second A program for executing an information management system having a collection procedure or a control procedure (steps S409 to S413) for controlling the execution unit 120 according to the importance of important information.

Returning to FIG. 10, specifically, in the manager device 300, the presentation unit 122 receives the importance of the second important information from the calculation unit 106, and provided the first important information that is the basis of the important information. The importance is transmitted to the device 400 via the network 10 using the communication unit 302.
The communication unit 302 realizes a function of performing wireless or wired communication with another device, for example, the agent device 400 via the network 10.

In the agent device 400, the communication unit 402 realizes a function of performing wireless or wired communication with another device such as the manager device 300 via the network 10.
For example, the collection unit 404 acquires information such as the location information of the user of the agent device 400 as the first important information. The collection unit 404 measures the position of the mobile terminal carried by each user using, for example, a mobile base station (not shown), GPS (not shown), or the like.

  The providing unit 406 transmits the first important information collected by the collecting unit 404 to the manager device 300 via the network 10 using the communication unit 402, and provides the execution unit 120 of the manager device 300 with the first important information. It is instructed to proceed with the process of executing the program with the important information as input. The providing unit 406 continuously transmits the first important information to the manager device 300 every time the collecting unit 404 acquires the first important information such as the position information. Alternatively, the manager device 300 may request provision of the first important information.

  The receiving unit 408 receives the importance from the manager device 300 via the network 10 using the communication unit 402. The control unit 410 continues or stops the provision of the first important information by the providing unit 406 according to the degree of change in the information disclosure level acquired by the receiving unit 408. That is, the control unit 410 determines whether the importance received by the receiving unit 408 is within the assumed range. If the received importance is not within the assumed range, the control unit 410 causes the providing unit 406 to stop transmitting the first important information to the manager device 300 thereafter. As described above, when it is determined that the provision of information to the outside is not appropriate, the provision of information can be stopped.

  Here, the “assumed range” represents, for example, a range of importance to the extent that important information that is an output of the program may be distributed to the outside. The assumed range may be an index input in advance by the user as a disclosure policy, or may be an index obtained by interactively inquiring the user when important information is received.

  In the information management system 1000 of the present embodiment, the agent device 400 can further include a setting reception unit (not shown) that receives a setting of a threshold value (assumed range) that controls the providing unit 406 according to importance. . The control unit 410 of the agent device 400 can control the providing unit 406 of the agent device 400 by comparing the importance acquired by the reception unit 408 of the agent device 400 with a threshold value.

The operation of the information management system 1000 of this embodiment configured as described above will be described below.
11, the operation of the manager device 300 of the present embodiment is shown in FIG. 11 and a program analysis phase having steps S101 to S105 similar to the flow of the information management device 100 of the embodiment shown in FIG. And a program execution phase of the manager device 300 of the present embodiment. In FIG. 11, the program analysis phase is not shown. Hereinafter, a description will be given with reference to FIGS. 10 and 11.

  The data processing method of the information management system 1000 of this embodiment is a data processing method of the information management system 1000. The information management system 1000 includes an execution unit 120 that can execute an arbitrary program, and the execution unit 120 executes the program. An execution result storage unit 104 that stores the execution result of the program when executed, the information management system 1000 collects the first important information (step S401), and the execution unit 120 collects the first collected information The second important information is input by continuously executing the program having at least one processing unit that outputs the second important information having the information disclosure level different from the information disclosure level of the first important information. The information is output (step S113), the first important information input to the execution unit 120, and the second weight output from the execution unit 120. The information is associated with each other and stored in the execution result storage unit 104. The execution result storage unit 104 is referred to, and the degree of change in the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information (importance) Is statistically calculated (step S115), and the collection of the first important information or the execution of the program of the execution unit 120 is controlled according to the importance of the second important information (steps S409 to S413). 1000 data processing methods.

  Specifically, in the agent device 400, the collection unit 404 collects first important information such as position information measured using a mobile phone base station, GPS, or the like (step S401). The control unit 410 determines whether or not transmission of the first important information is prohibited (step S403). If transmission of the first important information is permitted (YES in step S403), the providing unit 406 The first important information is transmitted to the manager device 300 via the communication unit 402 (step S405). On the other hand, if transmission of the first important information is prohibited (NO in step S403), step S405 is bypassed.

  In the manager device 300, the important information receiving unit 118 receives the first important information transmitted from the agent device 400 (step S111). Then, the verification unit generated by the generation unit 116 is executed by the execution unit 120, and the first important information received by the important information reception unit 118 is input to execute the verification program. Second important information for the important information is output, input / output information of each important information processing unit is recorded in the execution result, and stored in the execution result storage unit 104 (step S113).

  The execution result stored in the execution result storage unit 104 is read out by the calculation unit 106, and how much the information disclosure level of the second important information changes compared to the information disclosure level of the first important information. Statistically calculated and the importance of the second important information is predicted (step S115). The presentation unit 122 transmits the importance calculated by the calculation unit 106 to the agent device 400 via the network 10 using the communication unit 302 (step S311).

  Here, the manager device 300 individually manages the plurality of agent devices 400, and determines the importance of the second important information obtained from the first important information provided for each agent device 400 as the corresponding agent device. You can reply to 400.

  In the agent device 400, the receiving unit 408 receives the importance from the manager device 300 via the network 10 using the communication unit 402 (step S407). The control unit 410 determines whether or not the received importance is within the assumed range (step S409).

  If the received importance is within the assumed range (YES in step S409), the transmission of the first important information is permitted again (step S411). For example, a transmission permission flag is set. On the other hand, when the received importance is not within the assumed range (NO in step S409), the control unit 410 prohibits the providing unit 406 from transmitting the first important information to the manager device 300 thereafter. (Step S413).

  As described above, the information management system 1000 according to the present embodiment can determine whether the agent device 400 that provides information continuously transmits important information according to the importance of the information output by the program. . More specifically, by having the control unit 410 that receives the importance calculated in the manager device 300 and determines whether or not to continue transmission in the agent device 400, if the importance of the output information of the program is low, the agent If continuous information transmission from the device 400 is permitted and the importance of the output information of the program is high, by rejecting continuous information transmission from the agent device 400, within the scope of the assumption of the important information provider It can be ensured that the information is distributed outside the manager device 300.

(Sixth embodiment)
FIG. 12 is a functional block diagram showing the configuration of the information management system 1100 according to the embodiment of the present invention.
An information management system 1100 according to the present embodiment includes a manager device 500 having a configuration similar to that of the information management device according to the above-described embodiment, and at least one agent device 600 that is communicably connected to the manager device 500 via the network 10. It is equipped with.

  The information management system 1100 of this embodiment is different from the information management system 1000 of the above embodiment in that the agent device 600 causes the manager device 500 to execute a program, process information, and the like based on the importance calculated by the manager device 500. It is different in that permission is notified. For example, the manager device 500 receives the information output by the program and its importance, and the agent device determines whether to permit output to the outside.

The manager device 500 of the present embodiment has a configuration similar to that of the information management device 200 of the above embodiment of FIG. 4 and a presentation unit 122 similar to the information management device 100 of the above embodiment of FIG. A communication unit 302 that communicates with another device via the communication unit 302, and an output unit 504 that outputs the second important information obtained by executing the program by the execution unit 120 to the outside.
In FIG. 12, the same program receiving unit 112, specifying unit 114, and generating unit 116 as those of the information management apparatus 400 of the embodiment of FIG. 4 are not shown.

  An information management system 1100 of this embodiment includes an information collection device (agent device 600) that collects first important information, and an information management device (manager device 500) connected to the agent device 600. The agent device 600 includes a collection unit 404 that collects the first important information, a providing unit 406 that continuously provides the first important information to the manager device 500, The acquisition unit (reception unit 408) that acquires the degree of change in the information disclosure degree of the second important information generated from the important information, and the first according to the degree of change in the information disclosure degree acquired by the reception unit 408 And an approval unit 602 for notifying the manager device 500 of permission to process the important information.

  Also, the manager device 500 inputs the first important information, processes the input first important information, and has the information disclosure degree different from the information disclosure degree of the first important information. A program receiving unit 112 (not shown in FIG. 12) for receiving the program having at least one processing unit to output as, a specifying unit 114 (not shown in FIG. 12) for specifying the processing unit of the received program, An important information receiving unit (communication unit 302, important information receiving unit 118) that receives the first important information from the agent device 600, an execution unit 120 that can execute an arbitrary program, and a program execution result in the execution unit 120 are stored. The first important information input to the execution result storage device (execution result storage unit 104) and the processing unit of the identified program is recorded in the execution result Program code for recording the second important information corresponding to the first important information from the processing unit in the execution result is inserted before and after the processing unit of the program, respectively, and the verification program is The generation unit 116 (not shown in FIG. 12) to be generated and the received first important information are input, the execution unit 120 is caused to execute the verification program, and the input first important information is output from the execution unit 120 The execution result storage unit 104 that stores the second important information associated with each other and stores it as an execution result, and the execution result storage unit 104 refers to the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information The calculation unit 106 that statistically calculates the degree of change in the degree (importance of the second important information) and the notification of permission to process the first important information from the agent device 600 are received. A receiving unit (communication unit 302), a determining unit 502 that determines processing of the first important information or the second important information in accordance with the received notification of permission, a control unit 204 that executes the determined processing, Have

  In the information management system 1100 of the present embodiment, the manager device 500 further includes an output unit 504 that outputs the second important information to the outside, and the determination unit 502 of the manager device 500 performs the second notification according to the received notification of permission. Is determined to be output to the output unit 504 of the manager device 500, and the control unit 204 of the manager device 500 outputs the second important information determined to be output to the output unit 504 of the manager device 500. To output.

  If the second important information received from the agent device 600 is not immediately output from the output unit 504, the determining unit 502 stores the second important information that is permitted to be output in association with the second important information. For example, when the receiving unit (not shown) receives an output request for the second important information from the outside or a user, the second important information is referred to the storage unit. After confirming whether the information can be output, the information may be output from the output unit 504.

  Further, in the information management system 1100 of the present embodiment, the determination unit 502 of the manager device 500 determines an output destination that causes the output unit 504 of the manager device 500 to output the second important information according to the received permission notification, The control unit 204 of the manager device 500 can cause the output unit 504 to output the second important information to the determined output destination.

  Specifically, the manager device 500 of the present embodiment is the same as the information management device 200 of the embodiment of FIG. 4, and the program receiving unit 112, the specifying unit 114, the generating unit 116, the important information receiving unit 118, the execution unit 120, In addition to the result storage unit 104, the calculation unit 106, and the control unit 204, the same presentation unit 122 as the information management device 100 of the embodiment of FIG. 1, and the communication unit 302 similar to the manager device 300 of the embodiment of FIG. , A determination unit 502 and an output unit 504.

  In the present embodiment, when the execution unit 120 executes the program, the execution result storage unit 104 stores the second important information output for the input first important information. The determination unit 502 determines the processing of the second important information stored in the execution result storage unit 104 according to the notification received from the agent device 600 via the network 10 using the communication unit 302. In other words, when a notification permitting the processing is received from the agent device 600, the control unit 204 permits the output unit 504 to process the second important information to the outside. On the other hand, when the notification not permitting or prohibiting the process is received from the agent device 600, the control unit 204 causes the execution result storage unit 104 to discard the second important information.

  The control unit 204 executes processing according to the determination in the determination unit 502. The output unit 504 outputs the second important information stored in the execution result storage unit 104 via the network 10 to the external device using the communication unit 302 in accordance with an instruction from the control unit 204. The output unit 504 may output the second important information to an output device such as a display or a printer. Alternatively, the second important information may be output as data and recorded in various media or storage devices, or may be transmitted to other devices via mail transmission or a network. Alternatively, the execution result storage unit 104 may be stored in an area accessible from another device via a network so that the second important information can be browsed.

  The agent device 600 has the same configuration as the agent device 400 of the information management system 1000 in the embodiment of FIG. 10 and further includes an approval unit 602 instead of the control unit 410.

  The approval unit 602 receives the importance of the second important information corresponding to the first important information provided to the manager device 500 received by the receiving unit 408, and confirms whether the importance for the important information satisfies the condition To do. If the condition is satisfied, a message indicating approval is transmitted to the manager device 500 via the network 10 using the communication unit 402. On the other hand, if the condition is not satisfied, a message indicating denial is transmitted to the manager device 500 via the network 10 using the communication unit 402.

  The condition is a condition that the provider may output the important information to the outside of the manager device 500, and may be a condition regarding the importance of the important information. The condition may be given in advance from the provider, or may be given interactively from the provider at the time of approval.

  As an example, the approval unit 602 confirms whether the importance received from the manager device 500 is within the “assumed range”. The assumed range represents, for example, a range of importance that allows important information to be distributed / disclosed outside the manager device. The assumed range may be an index input in advance by the user as a disclosure policy, or may be an index obtained by interactively inquiring the user when importance is received.

  The approval unit 602 determines whether the information is within the “assumed range”. When the information is within the “assumed range”, the approval unit 602 sends an approval message to the manager device 500. When the information does not fall within the “assumed range”, the approval unit 602 transmits a denial message to the manager device 500.

  In the information management system 1100 of this embodiment, the agent device 600 may further include a setting reception unit (not shown) that receives a setting of a threshold value that permits processing according to importance. The approval unit 602 of the agent device 600 can compare the importance acquired by the receiving unit 408 of the agent device 600 with a threshold value and notify permission of the corresponding process.

  Further, the agent device 600 may receive the second important information from the determination unit 502 of the manager device 500 via the network 10, and the approval unit 602 may receive the contents of the received second important information. It is good also as conditions regarding.

The operation of the information management system 1100 of this embodiment configured as described above will be described below.
FIG. 13 is a flowchart showing an example of the operation of the information management system 1100 of this embodiment. The operation of the manager device 500 according to the present embodiment is the same as the program analysis phase having steps S101 to S105 similar to the flow of the information management device 100 according to the embodiment shown in FIG. 2, and the operation of the embodiment shown in FIG. Including a program execution phase of the manager device 500. In FIG. 13, the program analysis phase is not shown. Hereinafter, description will be made with reference to FIGS. 12 and 13.

In the present embodiment, the program execution phase of the manager device 500 in FIG. 13 includes steps S111 to S115 and S311 similar to the flow of the manager device 300 in FIG. 11, and further includes steps S511 to S517 described later.
The agent device 600 in FIG. 13 includes steps S401 and S405 to S409 similar to the flow of the agent device 400 in FIG. 11, and further includes steps S611 to S615 described later instead of steps S411 and S413.

  In the manager device 500, the execution unit 120 executes the verification program, the execution result is temporarily stored in the execution result storage unit 104 (step S113), and the calculation unit 106 calculates the importance of the second important information. (Step S115) The presentation unit 122 transmits the importance of the second important information to the agent device 600 that provided the corresponding first important information via the network 10 (Step S311). At this time, it is preferable to transmit together with the second important information so that the manager device 500 can determine which important information is important. Then, the manager device 500 waits for approval from the agent device 600.

  In the agent device 600, the receiving unit 408 receives the importance of the second important information from the manager device 500 (step S407), and the approval unit 602 determines whether or not the received importance is within the “assumed range”. (Step S409). Here, the “assumed range” is, for example, a range of importance that allows important information to be distributed outside the manager device.

If the importance is not within the range (NO in step S409), the message transmitted to the manager device 500 is set as a denial message (step S611). On the other hand, if the importance is within the range (YES in step S409), the message transmitted to the manager device 500 is set as an approval message (step S613).
Then, after the transmission message is determined, the approval unit 602 transmits the message to the manager device 500 using the communication unit 402 (step S615). At this time, it is preferable to transmit it together with the second important information so that the agent device 600 can determine which important information the message is for.

  In the manager device 500, the determination unit 502 receives a message from the agent device 600 using the communication unit 302 (step S511). The determination unit 502 determines whether or not to permit output of important information based on the message (step S513).

  That is, when the received message is an approval message, that is, when information output is permitted (YES in step S513), the output unit 504 is permitted to output the second important information, and the output unit 504 executes The second important information temporarily stored in the result storage unit 104 is read out and transmitted to the outside via the network 10 (step S515). On the other hand, when the received message is a denial message, that is, when the information output is prohibited (NO in step S513), the corresponding second stored temporarily in the execution result storage unit 104 by the control unit 204. Is discarded (step S517).

  As described above, according to the information management system 1100 of the present embodiment, information is output, discarded, or the program is executed within the information disclosure range designated by the agent device 600 side, that is, the information provider side. It is possible to control or conceal the output information.

  For example, according to the information management system 1100 of the present embodiment, if the second usage information output from the program is less important, distribution to the outside is permitted, and the second usage information output from the program is permitted. If the importance is high, by rejecting the distribution to the outside, it can be guaranteed that the information is distributed outside the manager device 500 within the scope of the assumption of the provider of the important information.

  As mentioned above, although embodiment of this invention was described with reference to drawings, these are the illustrations of this invention, Various structures other than the above are also employable.

  For example, in the above-described embodiment, the configuration in which the confidential processing is performed for the control of the processing according to the importance of the second important information that is the output information from the program in the information management device has been described. A configuration for processing information storage or external processing according to importance can also be included.

  That is, the information management apparatus according to another embodiment may include a storage unit (not shown) that can store the second important information, and the determination unit may change the information disclosure degree calculated by the calculation unit. According to the degree (importance), it is determined whether or not the second important information is stored in the storage unit, and the control unit causes the storage unit to store the second important information determined to be stored in the determination unit. The second important information determined not to be stored by the determination unit may be discarded.

  Alternatively, the information management apparatus according to another embodiment may further include an output unit (not shown) that outputs the second important information to the outside, and the determination unit changes the information disclosure degree calculated by the calculation unit The control unit determines whether to output the second important information to the output unit according to the degree (importance), and causes the output unit to output the second important information determined to be output. May be. Then, the second important information determined not to be output is not output.

  Further, the determining unit can determine a distribution destination that causes the output unit to output the second important information according to the importance calculated by the calculating unit. For example, the higher the importance, the more limited the distribution destination.

  Furthermore, in the information management apparatus according to another embodiment, the determination unit determines whether to allow the execution unit to execute the program according to the degree of change (importance) in the information disclosure level calculated by the calculation unit. Then, the control unit may cause the execution unit to execute the program determined to be permitted to be executed.

  In addition, in the information management apparatus according to another embodiment, the determination unit causes the important information reception unit to receive the first important information according to the degree of change (importance) of the information disclosure level calculated by the calculation unit. The control unit may cause the important information receiving unit to receive the first important information determined to be received.

  The information management apparatus according to another embodiment may further include an instruction receiving unit (not shown) that receives a permission instruction for processing the program or the second important information from the user. The processing of the program or the second important information may be determined according to the accepted permission instruction.

  According to this configuration, for example, the importance presented by the user is confirmed, the execution of the program is permitted or prohibited, the handling of the output information is determined, for example, stored, concealed, You can output or select a process.

  In the information management system 1100 of the above embodiment, the configuration in which the second important information is output in the manager device 500 according to the permission notification from the agent device 600 has been described. For example, the execution unit 120 executes the program. May be controlled. That is, in the information management system according to another embodiment, the execution unit 120 of the manager device 500 determines whether to execute the verification program in the execution unit 120 according to the received permission notification, and controls the manager device 500. The unit 204 may cause the execution unit 120 to execute the verification program determined to be executed.

  For example, it is possible to select which program to use based on the result of verification for each of a plurality of programs. For example, the presentation unit 122 may present the importance for each program, and the user may select a program that outputs information of an appropriate disclosure range. Alternatively, a program that automatically disables a program that outputs information with importance outside the expected range, or outputs particularly important information from programs that output information with importance within the expected range May be automatically selected to allow execution.

As shown in the information management system of the above embodiment, in the information management system of the present invention, each means (unit) is provided in either an information collection device (agent device) or an information management device (manager device). It is not limited.
The information management system according to the embodiment of the present invention continuously inputs the first important information collected by the collection unit 404 (FIGS. 10 and 12) that collects the first important information and the collection unit 404. An execution unit 120 (FIG. 10) that executes a program having at least one processing unit that outputs the second important information having an information disclosure level different from the information disclosure level of the first important information, and outputs the second important information. , FIG. 12) and the first important information input to the execution unit 120 and the second important information output from the execution unit 120 are stored in association with each other (FIGS. 10 and 12). Then, referring to the execution result storage unit 104, a calculation unit 106 that statistically calculates the degree of change in the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information (FIGS. 10 and 12) And the second important information The control unit 410 (FIG. 10) or the approval unit 602 (FIG. 12) and the control unit 204 (FIG. 12) that control the collection unit 404 or the execution unit 120 can be included depending on the degree of change in the disclosure level. .

Example 1
Hereinafter, as an embodiment of the information management apparatus of the present invention, a program that receives a location list of a plurality of users as an input and generates a list of prefecture names at each location as an output will be described as an example.

  As shown in FIG. 14, the original program P1 to be verified includes step S121 for extracting one user's address from the position list, step S123 for converting the extracted position into a prefecture name, and step S123 for the number of position lists. It is described to execute step S125 to be repeated and step S127 for generating a list of prefecture names by combining the prefecture names.

  The information management apparatus 100 of the above embodiment in FIG. 1 will be described as an example. A description will be given along the program analysis phase of FIG. When the original program P1 of the present embodiment is input to the specifying unit 114 via the program receiving unit 112 (step S101 in FIG. 2), the specifying unit 114 specifies a portion that is processing important information (FIG. 2). Step S103). In the case of the original program P1 in FIG. 14, the identifying unit 114 identifies the part in step S123 as the part where the important information is actually processed.

  Then, the generation unit 116 executes program code (in FIG. 15) for describing the contents and relations of the input / output information in the execution result before and after step S123 in FIG. 14 in which the important information specified by the specifying unit 114 is processed. Steps S131 and S133) are inserted to generate the verification program P2 shown in FIG. 15 (step S105 in FIG. 2).

  The verification program P <b> 2 in FIG. 15 is placed in the execution unit 120 or installed, thereby waiting for input of important information.

  Next, the program execution phase of FIG. 3 will be described. Here, it is assumed that the position information of each information provider as described in the input set 702 in FIG. 16 is input to the verification program P2 (step S111 in FIG. 3). Note that this position information expresses privacy as 1, considering that the possibility of uniquely identifying an individual is 100%.

  The verification program P2 performs the processing of steps S121, S123, S125, and S127 in FIG. 15 to convert the position information into the prefecture name, and outputs the information described as the output set 704 in FIG. Further, the verification program P2 performs the processing of steps S131 and S133 in FIG. 15 to record the contents of the input / output information and the corresponding relationship as the execution result 710 as shown in FIG. (Step S113 in FIG. 3).

  The calculation unit 106 calculates the degree of abstraction of the position information that is input and outputs it from the execution result 710 stored in the execution result storage unit 104, and predicts the importance (step S115 in FIG. 3). ).

  As shown in the execution result 710 shown in FIG. 16, ten kinds of position information starting from Tokyo are input, and after the program is processed, the characters “Tokyo” are output. It can be considered that the output is abstracted to 1/10 of the input information. Furthermore, since eight kinds of position information starting from Kanagawa Prefecture are input and the characters “Kanagawa Prefecture” are output after the processing of the program, the output “Kanagawa Prefecture” is 1/8 of the input information. Can be thought of as being abstracted.

  From these two types of output information, the target original program P1 is abstracted to 1/9 (10/18 * 1/10 + 8/18 * 1/8) on average, with the input information being averaged. It is assumed that the privacy of the output information is 1/9 (1 * 1/9) with respect to the privacy 1 of the input information. Here, the average of the abstraction for the two outputs is calculated. However, in order to further protect the privacy information, the privacy may be calculated using 1/10 having the largest abstraction ratio, In order to promote active distribution, privacy may be calculated using 1/8 having the smallest abstraction ratio.

  The presentation unit 122 confirms that the importance of the output information of the original program P1 executed by the execution unit 120 is the importance 1/9 calculated by the calculation unit 106, the administrator of the information management apparatus 100, the program provider, Alternatively, it is presented to a user such as an information provider (step S117 in FIG. 3).

(Example 2)
Next, an example of concealing information according to importance will be described as an embodiment of the information management apparatus of the present invention.
Hereinafter, the information management apparatus 210 of the above embodiment of FIG. 6 will be described as an example. In the present embodiment, as in the above embodiment, the original program P1 shown in FIG. 14 is input to the specifying unit 114 via the program receiving unit 112, and the verification shown in FIG. 15 is performed by the specifying unit 114 and the generating unit 116. Program P2 is generated.

  Hereinafter, the program execution phase of FIG. 7 will be described. 16 is received as an input (step S111 in FIG. 7), the execution unit 120 executes the generated verification program, and the obtained output set 704 in FIG. 16 is recorded in the execution result 710 and executed. The result is stored in the result storage unit 104 (step S113 in FIG. 7). The calculation unit 106 reads the execution result 710 in FIG. 16 and calculates that the importance of the output information of the original program P1 is 1/9 (step S115 in FIG. 7).

  Then, as shown in FIG. 17, the concealment unit 212 performs concealment processing such as encryption if the importance is 1/10 or higher, and does not perform concealment processing if the importance is lower than 1/10. Assume that the policy is preset as a secret policy. When the output set 704 of the verification program P2 and 1/9 of the importance S are input to the concealment unit 212, the condition that the importance S is 1/10 or more is satisfied, and therefore the output set 704 is satisfied. Then, confidential processing such as encryption is performed to generate confidential information 722. Note that in the confidential information 722 in FIG. 17, the prefectures are painted black, which schematically shows that the confidential processing is performed, and is actually encrypted information.

(Example 3)
Next, as an embodiment of the information management system of the present invention, an example in which transmission of important information from an agent device to a manager device is controlled according to predicted importance will be described.
Hereinafter, the information management system 1000 of the above embodiment of FIG. 10 will be described as an example. In the present embodiment, as in the above embodiment, the original program P1 shown in FIG. 14 is specified by the specifying unit 114 (FIG. The verification program P2 shown in FIG. 15 is generated by the specifying unit 114 and the generation unit 116 (not shown in FIG. 10).

  Hereinafter, a description will be given along the flowchart of FIG. The important information reception unit 118 of the manager device 300 receives the input set 702 of FIG. 16 as an input (step S111 of FIG. 11), and the execution unit 120 of the manager device 300 executes the generated verification program, and the obtained diagram The 16 output sets 704 are recorded in the execution result 710 and stored in the execution result storage unit 104 (step S113 in FIG. 11). The calculation unit 106 of the manager device 300 reads the execution result 710 in FIG. 16 and calculates that the importance of the output information of the original program P1 is 1/9 (step S115 in FIG. 11).

  In the one agent device 400a in FIG. 18, when the importance S of the information output from the manager device 300 is 1/5 or more, transmission of the important information from the providing unit 406 is stopped, and the importance S is smaller than 1/5. In this case, it is assumed that a transmission policy 730 for continuing transmission of important information from the providing unit 406 is preset for the control unit 410.

  In the other agent device 400b in FIG. 18, when the importance S of the information output from the manager device 300 is 1/10 or more, the transmission of the important information from the providing unit 406 is stopped, and the importance S is less than 1/10. In the case of being small, it is assumed that a transmission policy 732 for continuing transmission of important information from the providing unit 406 is preset for the control unit 410.

  The presentation unit 122 receives that the importance S of the output information of the manager device 300 is 1/9 by the reception unit 408 of each agent device 400 and notifies the control unit 410 of it. The control unit 410 refers to the transmission policies 730 and 732 and the importance S, and determines whether or not to continue transmission of important information in the future.

  In one agent apparatus 400a in FIG. 18, since the condition that the importance S of the output information is less than 1/5 with respect to 1/9 is satisfied, the providing unit 406 is informed that transmission is to be continued. . On the other hand, in the other agent device 400b in FIG. 18, since the importance S of the output information is 1/10 or more with respect to 1/9, transmission to the providing unit 406 is stopped. Tell them what to do. In each agent device 400, the providing unit 406 interrupts continuous transmission of important information when receiving an instruction to stop transmission in the process of continuously transmitting important information.

  In the example of FIG. 18, the same importance S transmitted from the manager device 300 is transmitted to the agent device 400a and the agent device 400b, but this is an example. As will be described later, if the important information provided from each agent device 400 to the manager device 300 is different, the importance of the information output by the program in the manager device 300 is also different. The unit 410 is controlled according to each transmission policy.

Example 4
Next, as an embodiment of the information management system of the present invention, an example will be described in which the agent device notifies the manager device of permission for program execution, information processing, and the like based on the calculated importance.
Hereinafter, the information management system 1100 of the above embodiment of FIG. 12 will be described as an example. In the present embodiment, as in the above embodiment, the original program P1 shown in FIG. 14 is identified by the specifying unit 114 (FIG. 12) via the program receiving unit 112 (not shown in FIG. 12) of the manager device 500 of FIG. The verification program P2 shown in FIG. 15 is generated by the specifying unit 114 and the generation unit 116 (not shown in FIG. 12).

  The calculation unit 106 reads the execution result 710 of FIG. 16, and the importance S1 of the output information “Tokyo” is 1/10, and the importance S2 of the output information “Kanagawa” is 1/8. Is calculated.

  In the one agent device 600a in FIG. 19, it is assumed that position information “Yokohama City, Kanagawa Prefecture...” Is collected by the collection unit 404 and transmitted to the manager device 500. Further, when the importance of the information output from the execution unit 120 of the manager device 500 is 1/10 or more, the manager device 500 refuses to use or distribute the information, and when the importance is less than 1/10, It is assumed that a provision policy 740 that allows the manager device 500 to use or distribute information is preset.

  In another agent device 600b in FIG. 19, it is assumed that position information “Nerima-ku, Tokyo ...” is collected by the collection unit 404 and transmitted to the manager device 500. Furthermore, when the importance of the information output from the execution unit 120 of the manager device 500 is 1/5 or more, the manager device 500 refuses to use or distribute the information, and when the importance is less than 1/5, It is assumed that a provision policy 742 that allows the manager device 500 to use or distribute the information is preset.

  The presentation unit 122 of the manager device 500 inputs “Yokohama City, Kanagawa ...” to the execution unit 120 and outputs it to the one agent device 600a in FIG. 19 that has transmitted “Yokohama, Kanagawa ...” to the manager device 500. The character string “Kanagawa Prefecture” and the importance S1 of 1/8 are transmitted as reference information 750. The approval unit 602 confirms the provided policy 740 via the reception unit 408 of the agent device 600a and satisfies the condition that 1/8 of the received importance S1 is lower than 1/5. A message indicating permission is sent to.

  When the manager device 500 outputs “Kanagawa Prefecture” to the outside of the manager device 500, the manager device 500 makes an inquiry to the determination unit 502, and if a message indicating permission is received, it can be output.

  Furthermore, the presentation unit 122 of the manager device 500 executes “Nerima-ku, Tokyo ...” on the manager device 500 with respect to the other agent device 600b in FIG. 19 that has transmitted “Nerima-ku, Tokyo ...” to the manager device 500. The character string “Tokyo” that is input to and output from the unit 120 and 1/10 of the importance S2 are transmitted as reference information 752 to the other agent device 600b. The approval unit 602 confirms the provided policy 742 and transmits a message indicating rejection to the manager device 500 because the condition that 1/10 of the importance S2 satisfies 1/10 or more is satisfied. When “Tokyo” is output to the outside of the manager device 500, if the determination unit 502 is inquired and a message indicating rejection is received, it cannot be output.

While the present invention has been described with reference to the embodiments and examples, the present invention is not limited to the above embodiments and examples. Various changes that can be understood by those skilled in the art can be made to the configuration and details of the present invention within the scope of the present invention.
Hereinafter, examples of the reference form will be added.
1. A program that inputs first important information, processes the input first important information, and outputs the first important information as second important information having an information disclosure degree different from the information disclosure degree of the first important information. A program receiving means for receiving;
Important information receiving means for receiving the first important information;
Execution means for inputting the first important information and executing the program;
Execution result storage means for associating and storing the input first important information and the output second important information as the execution result of the program when the execution means executes the program;
Calculation means for statistically calculating the degree of change in the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information with reference to the execution result stored in the execution result storage means; ,
An information management device comprising:
2. 1. In the information management device described in
The first important information is input from the program received by the program receiving means, and the input first important information is processed to be different from the information disclosure degree of the first important information. Identifying means for identifying at least one processing unit to be output as the second important information having an information disclosure level;
Program code for recording the first important information input to the processing unit of the identified program in the execution result, and the second important information output from the processing unit in the execution result A program code for recording is further inserted respectively before and after the processing unit of the program, and generating means for generating a verification program is further provided,
The execution means inputs the received first important information, executes the verification program, associates the input first important information with the output second important information, and executes the execution result. An information management device that records the information in the execution result storage means.
3. 1. Or 2. In the information management device described in
An information management apparatus further comprising a presenting unit that presents to the user a degree of change in the information disclosure level calculated by the calculating unit.
4). 1. To 3. In the information management device described in any one of
Determining means for determining processing according to the degree of change in the information disclosure degree calculated by the calculating means;
An information management apparatus further comprising control means for executing the determined process.
5). 4). In the information management device described in
A setting accepting unit for accepting a setting of a threshold for determining processing according to the degree of change in the information disclosure degree;
The determination unit is an information management apparatus that compares the degree of change in the information disclosure level calculated by the calculation unit with the threshold value and determines a corresponding process.
6). 4). Or 5. In the information management device described in
And further comprising a concealing means for concealing the second important information,
The determining unit determines whether or not to cause the concealing unit to conceal the second important information according to the degree of change in the information disclosure degree calculated by the calculating unit,
An information management device that causes the concealment unit to conceal the second important information output from the execution unit when the control unit is determined to be concealed by the determination unit.
7). 4). To 6. In the information management device described in any one of
Storing means capable of storing the second important information;
The determining unit determines whether to store the second important information in the storage unit according to the degree of change in the information disclosure level calculated by the calculating unit,
The control means stores the second important information determined to be stored by the determining means in the storage means, and discards the second important information determined not to be stored by the determining means .
8). 4). To 7. In the information management device described in any one of
An output means for outputting the second important information to the outside;
The determining means determines whether or not to output the second important information to the outside according to the degree of change in the information disclosure level calculated by the calculating means,
The control means is an information management apparatus for causing the output means to output the second important information determined to be output.
9. 8). In the information management device described in
The determination unit is an information management apparatus that determines a distribution destination that causes the output unit to output the second important information according to a degree of change in the information disclosure level calculated by the calculation unit.
10. 4). To 9. In the information management device described in any one of
The determining means determines whether or not to allow the execution means to execute the program according to the degree of change in the information disclosure degree calculated by the calculating means,
The control means is an information management apparatus that causes the execution means to execute the program determined to be permitted to be executed.
11. 4). To 10. In the information management device described in any one of
The determining means determines whether or not to allow the important information receiving means to accept the first important information according to the degree of change in the information disclosure degree calculated by the calculating means,
The information management apparatus which makes the said important information reception means receive the said 1st important information determined to receive the said control means.
12 4). To 11. In the information management device described in any one of
An instruction receiving means for receiving an instruction to permit the processing of the program or the second important information from a user;
The determination unit is an information management apparatus that determines the processing of the program or the second important information according to the permission instruction received by the instruction reception unit.
13. 1. To 12. In the information management device described in any one of
The program accepting means accepts a program having a processing unit that extracts the first important information and outputs the second important information,
The information calculating device statistically calculates the degree of extraction of the second important information with respect to the first important information.
14 13. In the information management device described in
The calculation means is an information management device that indicates the importance of the second important information with a lower numerical value as the degree of extraction calculated is larger.
15. 1. To 12. In the information management device described in any one of
The program accepting means accepts a program having a processing unit that aggregates a plurality of the first important information and outputs the second important information,
The information calculating device is configured to statistically calculate the number of aggregations of the first important information into the second important information as an aggregation degree.
16. 15. In the information management device described in
A setting acceptance means for accepting a setting indicating whether the importance of the second important information is indicated by a high numerical value or a low numerical value as the calculated degree of aggregation is large;
The calculation means is an information management device that indicates the importance of the second important information numerically according to the received setting.
17. A processing unit that inputs first important information, processes the inputted first important information, and outputs the second important information having an information disclosure level different from the information disclosure level of the first important information. Sample input information that is input as a sample of the first important information to the processing unit of the program having at least one, and second importance corresponding to the sample input information from the processing unit when the program is executed Acquisition means for acquiring sample output information output as a sample of information;
Execution result storage means for storing the sample input information and the sample output information acquired by the acquisition means in association with each other;
An information management apparatus comprising: a calculation unit that refers to the execution result storage unit and statistically calculates a degree of change in the information disclosure level of the sample output information with respect to the information disclosure level of the sample input information.
18. A collecting means for collecting the first important information;
At least one processing unit that continuously inputs the first important information collected by the collecting unit and outputs the first important information as second important information having an information disclosure level different from the information disclosure level of the first important information. Execution means for executing a program having a plurality of outputs and outputting the second important information;
Execution result storage means for storing the first important information input to the execution means and the second important information output from the execution means in association with each other;
A calculation unit that refers to the execution result storage unit and statistically calculates the degree of change in the information disclosure level of the second important information with respect to the information disclosure level of the first important information;
An information management system comprising: control means for controlling the collection means or the execution means in accordance with the degree of change in the information disclosure degree of the second important information.
19. An information collecting device for collecting the first important information;
An information management system comprising an information management device connected to the information collection device,
The information collecting device
A collecting means for collecting the first important information;
Providing means for continuously providing the first important information to the information management device;
The first important information is processed to obtain from the information management device the degree of change in the information disclosure level of the second important information having an information disclosure level different from the information disclosure level of the first important information. Acquisition means to
Control means for controlling the providing means according to the degree of change in the information disclosure degree obtained by the obtaining means,
The information management device includes:
The first important information is input, the input first important information is processed and output as the second important information having an information disclosure level different from the information disclosure level of the first important information. Program receiving means for receiving a program having at least one processing unit;
Specifying means for specifying the processing unit of the received program;
Important information receiving means for receiving the first important information from the information collecting device;
An execution means capable of executing an arbitrary program;
An execution result storage device capable of storing the execution result of the program in the execution means;
Program code for recording the first important information inputted to the processing unit of the identified program in the execution result, and a second important corresponding to the first important information from the processing unit Generating means for inserting a program code for recording information in the execution result before and after the processing unit of the program, and generating a verification program;
The received first important information is input to cause the execution means to execute the verification program, and the input first important information and the second important information output from the execution means are associated with each other. Storage means for storing the execution result in the execution result storage device;
A calculation unit that refers to the execution result storage device and statistically calculates the degree of change in the information disclosure level of the second important information with respect to the information disclosure level of the first important information;
An information management system.
20. 19. In the information management system described in
The information management system in which the control unit of the information collecting apparatus continues or stops the provision of the first important information by the providing unit according to the degree of change in the information disclosure level acquired by the acquiring unit.
21. 19. Or 20. In the information management system described in
The information collection device further includes a setting reception unit that receives a setting of a threshold value that controls the providing unit according to the degree of change in the information disclosure level,
The control unit of the information collection device compares the threshold of the information disclosure degree acquired by the acquisition unit of the information collection device with the threshold value, and controls the providing unit of the information collection device system.
22. An information collecting device for collecting the first important information;
An information management system comprising an information management device connected to the information collection device,
The information collecting device includes:
A collecting means for collecting the first important information;
Providing means for continuously providing the first important information to the information management device;
Obtaining means for obtaining a degree of change in information disclosure degree of second important information generated from the first important information from the information management device;
Notification means for notifying the information management device of permission to process the first important information according to the degree of change in the information disclosure level acquired by the acquisition means;
The information management device includes:
The first important information is input, the input first important information is processed and output as the second important information having an information disclosure level different from the information disclosure level of the first important information. Program receiving means for receiving a program having at least one processing unit;
Specifying means for specifying the processing unit of the received program;
Important information receiving means for receiving the first important information from the information collecting device;
An execution means capable of executing an arbitrary program;
An execution result storage device capable of storing the execution result of the program in the execution means;
Program code for recording the first important information inputted to the processing unit of the identified program in the execution result, and a second important corresponding to the first important information from the processing unit Generating means for inserting a program code for recording information in the execution result before and after the processing unit of the program, and generating a verification program;
The received first important information is input to cause the execution means to execute the verification program, and the input first important information and the second important information output from the execution means are associated with each other. Storage means for storing the execution result in the execution result storage device;
A calculation unit that refers to the execution result storage device and statistically calculates the degree of change in the information disclosure level of the second important information with respect to the information disclosure level of the first important information;
Receiving means for receiving a notification of the permission of the processing of the first important information from the information collecting device;
Determining means for determining processing of the first important information or the second important information according to the received notification of the permission;
An information management system comprising: control means for executing the determined process.
23. 22. In the information management system described in
The information collection device further includes a setting reception unit that receives a setting of a threshold value that permits processing according to the degree of change in the information disclosure level,
The information management system in which the notifying unit of the information collecting apparatus compares the threshold of the information disclosure degree acquired by the acquiring unit of the information collecting apparatus with the threshold value and notifies the permission of the corresponding process.
24. 22. Or 23. In the information management system described in
The determination unit of the information management apparatus determines whether to execute the verification program in the execution unit according to the received notification of the permission,
An information management system in which the control means of the information management apparatus causes the execution means to execute the verification program determined to be executed.
25. 22. To 24. In the information management system described in either
The information management device further includes output means for outputting the second important information to the outside,
The determining unit of the information management device determines whether to output the second important information to the output unit of the information management device according to the received notification of the permission,
The information management system in which the control means of the information management apparatus causes the output means of the information management apparatus to output the second important information determined to be output.
26. 25. In the information management system described in
The determining unit of the information management device determines an output destination for outputting the second important information to the output unit of the information management device according to the received notification of the permission,
The information management system in which the control means of the information management apparatus causes the output means to output the second important information to the determined output destination.
27. A data processing method for an information management device, comprising:
The information management device includes:
An execution device capable of executing any program;
An execution result storage device that stores an execution result of the program when the execution device executes the program;
The information management device is
A program that inputs first important information, processes the inputted first important information, and outputs it as second important information having an information disclosure level different from the information disclosure level of the first important information
Accept
Receiving the first important information;
Input the first important information to the execution device to execute the program;
The input first important information and the output second important information are associated with each other and stored in the execution result storage device as the execution result of the program,
An information management device that statistically calculates the degree of change in the information disclosure level of the second important information with respect to the information disclosure level of the first important information with reference to the execution result stored in the execution result storage device Data processing method.
28. 27. In the data processing method of the information management device described in
The first important information is input from the received program, and the input first important information is processed to have an information disclosure level different from the information disclosure level of the first important information. Identifying at least one processing unit to output as the second important information;
Program code for recording the first important information input to the processing unit of the identified program in the execution result, and the second important information output from the processing unit in the execution result Insert a program code for recording before and after the processing unit of the program, and generate a verification program,
The execution device inputs the received first important information to execute the verification program, associates the input first important information with the output second important information, and executes the execution result. A data processing method of an information management device that records the information in the execution result storage device.
29. A data processing method for an information management device, comprising:
The information management device includes:
An execution device capable of executing any program;
An execution result storage device that stores an execution result of the program when the execution device executes the program;
The information management device is
Gather the first important information,
At least a processing unit that continuously inputs the collected first important information to the execution device and outputs it as second important information having an information disclosure level different from the information disclosure level of the first important information. Executing a program having one, outputting the second important information,
The first important information input to the execution device and the second important information output from the execution device are associated with each other and stored in the execution result storage device,
With reference to the execution result storage device, the degree of change in the information disclosure level of the second important information with respect to the information disclosure level of the first important information is calculated statistically,
A data processing method of an information management device for controlling collection of the first important information or execution of the program of the execution device in accordance with a degree of change in the information disclosure level of the second important information.
30. A computer program for realizing an information management device,
The information management device includes:
An execution device capable of executing any program;
An execution result storage device that stores an execution result of the program when the execution device executes the program;
On the computer,
A program that inputs first important information, processes the input first important information, and outputs the first important information as second important information having an information disclosure degree different from the information disclosure degree of the first important information. Accepting program acceptance procedure,
An important information receiving procedure for receiving the first important information;
An execution procedure for inputting the first important information and causing the execution device to execute the program;
A procedure for storing the input first important information and the output second important information in the execution result storage device as the execution result of the program when the program is executed by the execution device;
A calculation procedure for referring to the execution result stored in the execution result storage device and statistically calculating the degree of change in the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information; A program for running
31. 30. In the computer program described in
The first important information is input from the programs received in the program receiving procedure, and the input first important information is processed to differ from the information disclosure degree of the first important information. A specifying procedure for specifying at least one processing unit to be output as the second important information having an information disclosure level;
Program code for recording the first important information input to the processing unit of the identified program in the execution result, and the second important information output from the processing unit in the execution result A generation procedure for inserting a program code for recording before and after the processing unit of the program to generate a verification program,
The execution device inputs the received first important information to execute the verification program, associates the input first important information with the output second important information, and executes the execution result. A program for causing a program to be recorded and stored in the execution result storage device.
32. A computer program for realizing an information management device,
The information management device includes:
An execution device capable of executing any program;
An execution result storage device that stores an execution result of the program when the execution device executes the program;
On the computer,
A collection procedure for collecting the first important information;
The first important information collected by the collection procedure is continuously input to the execution device, and is output as second important information having an information disclosure level different from the information disclosure level of the first important information. An execution procedure for executing a program having at least one processing unit to output the second important information;
A procedure for associating and storing the first important information input to the execution device and the second important information output from the execution device in an execution result storage device;
A calculation procedure for referring to the execution result storage device and statistically calculating the degree of change in the information disclosure level of the second important information with respect to the information disclosure level of the first important information;
A program for executing an information management system having the collection procedure or a control procedure for controlling the execution device in accordance with the degree of change in the information disclosure degree of the second important information.

It is a functional block diagram which shows the structure of the information management apparatus which concerns on embodiment of this invention. 3 is a flowchart illustrating an example of an operation in a program analysis phase of the information management apparatus in FIG. 1. 3 is a flowchart illustrating an example of an operation in a program execution phase of the information management apparatus in FIG. 1. It is a functional block diagram which shows the structure of the information management apparatus which concerns on embodiment of this invention. 5 is a flowchart illustrating an example of an operation in a program execution phase of the information management apparatus in FIG. 4. It is a functional block diagram which shows the structure of the information management apparatus which concerns on embodiment of this invention. It is a flowchart which shows an example of the operation | movement at the time of the program execution phase of the information management apparatus of FIG. It is a functional block diagram which shows the structure of the information management apparatus which concerns on embodiment of this invention. It is a flowchart which shows an example of operation | movement of the information management apparatus of FIG. It is a functional block diagram which shows the structure of the information management system which concerns on embodiment of this invention. It is a flowchart which shows an example of operation | movement of the information management system of FIG. It is a functional block diagram which shows the structure of the information management system which concerns on embodiment of this invention. It is a flowchart which shows an example of operation | movement of the information management system of FIG. It is a figure which shows an example of the original program of the verification object of the Example of this invention. It is a figure which shows an example of the program for verification produced | generated from the original program of FIG. It is a figure which shows an example of the execution result of the program of the Example of this invention. It is a figure for demonstrating the process of the information management apparatus of the Example of this invention. It is a figure for demonstrating the process of the information management system of the Example of this invention. It is a figure for demonstrating the process of the information management system of the Example of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Network 100 Information management apparatus 102 Acquisition part 104 Execution result storage part 106 Calculation part 110 Information management apparatus 112 Program reception part 114 Identification part 116 Generation part 118 Important information reception part 120 Execution part 122 Presentation part 200 Information management apparatus 202 Determination part 204 Control unit 210 Information management device 212 Concealment unit 1000 Information management system 300 Manager device 302 Communication unit 400 Agent device 402 Communication unit 404 Collection unit 406 Provision unit 408 Reception unit 410 Control unit 1100 Information management system 500 Manager device 502 Determination unit 504 Output unit 600 Agent device 602 Approving unit 702 Input set 704 Output set 710 Execution result 722 Confidential information 730 Transmission policy 732 Transmission policy 740 Provision policy 742 Provision policy 750 Reference information 7 2 reference information

Claims (48)

A program that inputs first important information, processes the input first important information, and outputs the first important information as second important information having an information disclosure degree different from the information disclosure degree of the first important information. A program receiving means for receiving;
Important information receiving means for receiving the first important information;
Execution means for inputting the first important information and executing the program;
Execution result storage means for associating and storing the input first important information and the output second important information as the execution result of the program when the execution means executes the program;
Calculation means for statistically calculating the degree of change in the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information with reference to the execution result stored in the execution result storage means; ,
An information management device comprising: In the information management device according to claim 1,
The first important information is input from the program received by the program receiving means, and the input first important information is processed to be different from the information disclosure degree of the first important information. Identifying means for identifying at least one processing unit to be output as the second important information having an information disclosure level;
Program code for recording the first important information input to the processing unit of the identified program in the execution result, and the second important information output from the processing unit in the execution result A program code for recording is further inserted respectively before and after the processing unit of the program, and generating means for generating a verification program is further provided,
The execution means inputs the received first important information, executes the verification program, associates the input first important information with the output second important information, and executes the execution result. An information management device that records the information in the execution result storage means. In the information management device according to claim 1 or 2,
An information management apparatus further comprising a presenting unit that presents to the user a degree of change in the information disclosure level calculated by the calculating unit. In the information management device according to any one of claims 1 to 3,
Determining means for determining processing according to the degree of change in the information disclosure degree calculated by the calculating means;
An information management apparatus further comprising control means for executing the determined process. In the information management device according to claim 4,
A setting accepting unit for accepting a setting of a threshold for determining processing according to the degree of change in the information disclosure degree;
The determination unit is an information management apparatus that compares the degree of change in the information disclosure level calculated by the calculation unit with the threshold value and determines a corresponding process. In the information management device according to claim 4 or 5,
And further comprising a concealing means for concealing the second important information,
The determining unit determines whether or not to cause the concealing unit to conceal the second important information according to the degree of change in the information disclosure degree calculated by the calculating unit,
An information management device that causes the concealment unit to conceal the second important information output from the execution unit when the control unit is determined to be concealed by the determination unit. The information management device according to any one of claims 4 to 6,
Storing means capable of storing the second important information;
The determining unit determines whether to store the second important information in the storage unit according to the degree of change in the information disclosure level calculated by the calculating unit,
The control means stores the second important information determined to be stored by the determining means in the storage means, and discards the second important information determined not to be stored by the determining means . In the information management device according to any one of claims 4 to 7,
An output means for outputting the second important information to the outside;
The determining means determines whether or not to output the second important information to the outside according to the degree of change in the information disclosure level calculated by the calculating means,
The control means is an information management apparatus for causing the output means to output the second important information determined to be output. In the information management device according to claim 8,
The determination unit is an information management apparatus that determines a distribution destination that causes the output unit to output the second important information according to a degree of change in the information disclosure level calculated by the calculation unit. In the information management device according to any one of claims 4 to 9,
The determining means determines whether or not to allow the execution means to execute the program according to the degree of change in the information disclosure degree calculated by the calculating means,
The control means is an information management apparatus that causes the execution means to execute the program determined to be permitted to be executed. The information management device according to any one of claims 4 to 10,
The determining means determines whether or not to allow the important information receiving means to accept the first important information according to the degree of change in the information disclosure degree calculated by the calculating means,
The information management apparatus which makes the said important information reception means receive the said 1st important information determined to receive the said control means. In the information management device according to any one of claims 4 to 11,
An instruction receiving means for receiving an instruction to permit the processing of the program or the second important information from a user;
The determination unit is an information management apparatus that determines the processing of the program or the second important information according to the permission instruction received by the instruction reception unit. The information management device according to any one of claims 1 to 12,
It said program receiving means receives the first key information abstraction to the second pre-Symbol program that outputs key information,
The calculation means is a degree of extraction of the second important information with respect to the first important information as a degree of change in the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information. Information management device that statistically calculates In the information management device according to claim 13,
The calculation means is an information management device that indicates the importance of the second important information with a lower numerical value as the degree of extraction calculated is larger. The information management device according to any one of claims 1 to 12,
It said program receiving means receives the first key information multiple aggregated to previous SL program that outputs the second key information,
The calculation means calculates the aggregate number of the first important information to the second important information as the degree of change in the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information. An information management device that statistically calculates the degree of aggregation. The information management device according to claim 15, wherein
A setting acceptance means for accepting a setting indicating whether the importance of the second important information is indicated by a high numerical value or a low numerical value as the calculated degree of aggregation is large;
The calculation means is an information management device that indicates the importance of the second important information numerically according to the received setting. A processing unit that inputs first important information, processes the inputted first important information, and outputs the second important information having an information disclosure level different from the information disclosure level of the first important information. Sample input information that is input as a sample of the first important information to the processing unit of the program having at least one, and second importance corresponding to the sample input information from the processing unit when the program is executed Acquisition means for acquiring sample output information output as a sample of information;
Execution result storage means for storing the sample input information and the sample output information acquired by the acquisition means in association with each other;
An information management apparatus comprising: a calculation unit that refers to the execution result storage unit and statistically calculates a degree of change in the information disclosure level of the sample output information with respect to the information disclosure level of the sample input information. The information management device according to claim 17,
The processing unit of the program extracts the first important information and outputs the second important information,
The calculation means is a degree of extraction of the second important information with respect to the first important information as a degree of change in the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information. Information management device that statistically calculates The information management device according to claim 17,
The processing unit of the program aggregates a plurality of the first important information and outputs the second important information,
The calculation means calculates the aggregate number of the first important information to the second important information as the degree of change in the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information. An information management device that statistically calculates the degree of aggregation. A collecting means for collecting the first important information;
At least one processing unit that continuously inputs the first important information collected by the collecting unit and outputs the first important information as second important information having an information disclosure level different from the information disclosure level of the first important information. Execution means for executing a program having a plurality of outputs and outputting the second important information;
Execution result storage means for storing the first important information input to the execution means and the second important information output from the execution means in association with each other;
A calculation unit that refers to the execution result storage unit and statistically calculates the degree of change in the information disclosure level of the second important information with respect to the information disclosure level of the first important information;
An information management system comprising: control means for controlling the collection means or the execution means in accordance with the degree of change in the information disclosure degree of the second important information. The information management system according to claim 20, wherein
The processing unit of the program extracts the first important information and outputs the second important information,
The calculation means is a degree of extraction of the second important information with respect to the first important information as a degree of change in the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information. Information management system that statistically calculates The information management system according to claim 20, wherein
The processing unit of the program aggregates a plurality of the first important information and outputs the second important information,
The calculation means calculates the aggregate number of the first important information to the second important information as the degree of change in the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information. An information management system that statistically calculates the degree of aggregation. An information collecting device for collecting the first important information;
An information management system comprising an information management device connected to the information collection device,
The information collecting device includes:
A collecting means for collecting the first important information;
Providing means for continuously providing the first important information to the information management device;
The first important information is processed to obtain from the information management device the degree of change in the information disclosure level of the second important information having an information disclosure level different from the information disclosure level of the first important information. Acquisition means to
Control means for controlling the providing means according to the degree of change in the information disclosure degree obtained by the obtaining means,
The information management device includes:
The first important information is input, the input first important information is processed and output as the second important information having an information disclosure level different from the information disclosure level of the first important information. Program receiving means for receiving a program having at least one processing unit;
Specifying means for specifying the processing unit of the received program;
Important information receiving means for receiving the first important information from the information collecting device;
An execution means capable of executing an arbitrary program;
An execution result storage device capable of storing the execution result of the program in the execution means;
Program code for recording the first important information inputted to the processing unit of the identified program in the execution result, and a second important corresponding to the first important information from the processing unit Generating means for inserting a program code for recording information in the execution result before and after the processing unit of the program, and generating a verification program;
The received first important information is input to cause the execution means to execute the verification program, and the input first important information and the second important information output from the execution means are associated with each other. Storage means for storing the execution result in the execution result storage device;
A calculation unit that refers to the execution result storage device and statistically calculates the degree of change in the information disclosure level of the second important information with respect to the information disclosure level of the first important information;
An information management system. The information management system according to claim 23,
The information management system in which the control unit of the information collecting apparatus continues or stops the provision of the first important information by the providing unit according to the degree of change in the information disclosure level acquired by the acquiring unit. In the information management system according to claim 23 or 24,
The information collection device further includes a setting reception unit that receives a setting of a threshold value that controls the providing unit according to the degree of change in the information disclosure level,
The control unit of the information collection device compares the threshold of the information disclosure degree acquired by the acquisition unit of the information collection device with the threshold value, and controls the providing unit of the information collection device system. The information management system according to any one of claims 23 to 25,
The program receiving means receives the program having the processing unit that extracts the first important information and outputs the second important information,
The calculation means is a degree of extraction of the second important information with respect to the first important information as a degree of change in the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information. Information management system that statistically calculates The information management system according to any one of claims 23 to 25,
The program receiving means receives the program having the processing unit that aggregates a plurality of the first important information and outputs the second important information,
The calculation means calculates the aggregate number of the first important information to the second important information as the degree of change in the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information. An information management system that statistically calculates the degree of aggregation. An information collecting device for collecting the first important information;
An information management system comprising an information management device connected to the information collection device,
The information collecting device includes:
A collecting means for collecting the first important information;
Providing means for continuously providing the first important information to the information management device;
Obtaining means for obtaining a degree of change in information disclosure degree of second important information generated from the first important information from the information management device;
Notification means for notifying the information management device of permission to process the first important information according to the degree of change in the information disclosure level acquired by the acquisition means;
The information management device includes:
The first important information is input, the input first important information is processed and output as the second important information having an information disclosure level different from the information disclosure level of the first important information. Program receiving means for receiving a program having at least one processing unit;
Specifying means for specifying the processing unit of the received program;
Important information receiving means for receiving the first important information from the information collecting device;
An execution means capable of executing an arbitrary program;
An execution result storage device capable of storing the execution result of the program in the execution means;
Program code for recording the first important information inputted to the processing unit of the identified program in the execution result, and a second important corresponding to the first important information from the processing unit Generating means for inserting a program code for recording information in the execution result before and after the processing unit of the program, and generating a verification program;
The received first important information is input to cause the execution means to execute the verification program, and the input first important information and the second important information output from the execution means are associated with each other. Storage means for storing the execution result in the execution result storage device;
A calculation unit that refers to the execution result storage device and statistically calculates the degree of change in the information disclosure level of the second important information with respect to the information disclosure level of the first important information;
Receiving means for receiving a notification of the permission of the processing of the first important information from the information collecting device;
Determining means for determining processing of the first important information or the second important information according to the received notification of the permission;
An information management system comprising: control means for executing the determined process. The information management system according to claim 28, wherein
The information collection device further includes a setting reception unit that receives a setting of a threshold value that permits processing according to the degree of change in the information disclosure level,
The information management system in which the notifying unit of the information collecting apparatus compares the threshold of the information disclosure degree acquired by the acquiring unit of the information collecting apparatus with the threshold value and notifies the permission of the corresponding process. The information management system according to claim 28 or 29,
The determination unit of the information management apparatus determines whether to execute the verification program in the execution unit according to the received notification of the permission,
An information management system in which the control means of the information management apparatus causes the execution means to execute the verification program determined to be executed. The information management system according to any one of claims 28 to 30,
The information management device further includes output means for outputting the second important information to the outside,
The determining unit of the information management device determines whether to output the second important information to the output unit of the information management device according to the received notification of the permission,
The information management system in which the control means of the information management apparatus causes the output means of the information management apparatus to output the second important information determined to be output. The information management system according to claim 31,
The determining unit of the information management device determines an output destination for outputting the second important information to the output unit of the information management device according to the received notification of the permission,
The information management system in which the control means of the information management apparatus causes the output means to output the second important information to the determined output destination. The information management system according to any one of claims 28 to 32,
The program receiving means receives the program having the processing unit that extracts the first important information and outputs the second important information,
The calculation means is a degree of extraction of the second important information with respect to the first important information as a degree of change in the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information. Information management system that statistically calculates The information management system according to any one of claims 28 to 32,
The program receiving means receives the program having the processing unit that aggregates a plurality of the first important information and outputs the second important information,
The calculation means calculates the aggregate number of the first important information to the second important information as the degree of change in the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information. An information management system that statistically calculates the degree of aggregation. A data processing method for an information management device, comprising:
The information management device includes:
An execution device capable of executing any program;
An execution result storage device that stores an execution result of the program when the execution device executes the program;
The information management device is
A program that inputs first important information, processes the input first important information, and outputs the first important information as second important information having an information disclosure degree different from the information disclosure degree of the first important information. Accept,
Receiving the first important information;
Input the first important information to the execution device to execute the program;
The input first important information and the output second important information are associated with each other and stored in the execution result storage device as the execution result of the program,
An information management device that statistically calculates the degree of change in the information disclosure level of the second important information with respect to the information disclosure level of the first important information with reference to the execution result stored in the execution result storage device Data processing method. The data processing method of the information management device according to claim 35,
The first important information is input from the received program, and the input first important information is processed to have an information disclosure level different from the information disclosure level of the first important information. Identifying at least one processing unit to output as the second important information;
Program code for recording the first important information input to the processing unit of the identified program in the execution result, and the second important information output from the processing unit in the execution result Insert a program code for recording before and after the processing unit of the program, and generate a verification program,
The execution device inputs the received first important information to execute the verification program, associates the input first important information with the output second important information, and executes the execution result. A data processing method of an information management device that records the information in the execution result storage device. The data processing method according to claim 35 or 36,
The program outputs the second key information by extracting the first key information,
The information management device extracts the second important information from the first important information as a degree of change in the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information. A data processing method that statistically calculates the degree. The data processing method according to claim 35 or 36,
The program is the first key information by a plurality aggregate outputs the second key information,
As the degree of change in the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information, the information management apparatus aggregates the first important information into the second important information. Data processing method that statistically calculates the degree of aggregation representing A data processing method for an information management device, comprising:
The information management device includes:
An execution device capable of executing any program;
An execution result storage device that stores an execution result of the program when the execution device executes the program;
The information management device is
Gather the first important information,
At least a processing unit that continuously inputs the collected first important information to the execution device and outputs it as second important information having an information disclosure level different from the information disclosure level of the first important information. Executing a program having one, outputting the second important information,
The first important information input to the execution device and the second important information output from the execution device are associated with each other and stored in the execution result storage device,
With reference to the execution result storage device, the degree of change in the information disclosure level of the second important information with respect to the information disclosure level of the first important information is calculated statistically,
A data processing method of an information management device for controlling collection of the first important information or execution of the program of the execution device in accordance with a degree of change in the information disclosure level of the second important information. 40. A data processing method according to claim 39, wherein
The processing unit of the program extracts the first important information and outputs the second important information,
The information management device extracts the second important information from the first important information as a degree of change in the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information. A data processing method that statistically calculates the degree. 40. A data processing method according to claim 39, wherein
The processing unit of the program aggregates a plurality of the first important information and outputs the second important information,
As the degree of change in the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information, the information management apparatus aggregates the first important information into the second important information. Data processing method that statistically calculates the degree of aggregation representing A computer program for realizing an information management device,
The information management device includes:
An execution device capable of executing any program;
An execution result storage device that stores an execution result of the program when the execution device executes the program;
On the computer,
A program that inputs first important information, processes the input first important information, and outputs the first important information as second important information having an information disclosure degree different from the information disclosure degree of the first important information. Accepting program acceptance procedure,
An important information receiving procedure for receiving the first important information;
An execution procedure for inputting the first important information and causing the execution device to execute the program;
A procedure for storing the input first important information and the output second important information in the execution result storage device as the execution result of the program when the program is executed by the execution device;
A calculation procedure for referring to the execution result stored in the execution result storage device and statistically calculating the degree of change in the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information; A program for running 43. A computer program according to claim 42.
The first important information is input from the programs received in the program receiving procedure, and the input first important information is processed to differ from the information disclosure degree of the first important information. A specifying procedure for specifying at least one processing unit to be output as the second important information having an information disclosure level;
Program code for recording the first important information input to the processing unit of the identified program in the execution result, and the second important information output from the processing unit in the execution result A generation procedure for inserting a program code for recording before and after the processing unit of the program to generate a verification program,
The execution device inputs the received first important information to execute the verification program, associates the input first important information with the output second important information, and executes the execution result. A program for causing a program to be recorded and stored in the execution result storage device. The computer program according to claim 42 or 43,
The program receiving procedure receives the program that extracts the first important information and outputs the second important information,
The calculation procedure includes a degree of extraction of the second important information with respect to the first important information as a degree of change in the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information. A computer program that statistically calculates The computer program according to claim 42 or 43,
The program receiving procedure receives the program that aggregates a plurality of the first important information and outputs the second important information,
In the calculation procedure, as the degree of change in the information disclosure level of the second important information with respect to the information disclosure level of the first important information, the aggregation number of the first important information in the second important information is calculated. A computer program that statistically calculates the degree of aggregation. A computer program for realizing an information management device,
The information management device includes:
An execution device capable of executing any program;
An execution result storage device that stores an execution result of the program when the execution device executes the program;
On the computer,
A collection procedure for collecting the first important information;
The first important information collected by the collection procedure is continuously input to the execution device, and is output as second important information having an information disclosure level different from the information disclosure level of the first important information. An execution procedure for executing a program having at least one processing unit to output the second important information;
A procedure for associating and storing the first important information input to the execution device and the second important information output from the execution device in an execution result storage device;
A calculation procedure for referring to the execution result storage device and statistically calculating the degree of change in the information disclosure level of the second important information with respect to the information disclosure level of the first important information;
A program for executing an information management system having the collection procedure or a control procedure for controlling the execution device in accordance with the degree of change in the information disclosure degree of the second important information. The computer program according to claim 46,
The processing unit of the program executed by the execution procedure extracts the first important information and outputs the second important information,
The calculation procedure includes a degree of extraction of the second important information with respect to the first important information as a degree of change in the information disclosure degree of the second important information with respect to the information disclosure degree of the first important information. A computer program that statistically calculates The computer program according to claim 46,
The processing unit of the program executed by the execution procedure aggregates a plurality of the first important information and outputs the second important information,
In the calculation procedure, as the degree of change in the information disclosure level of the second important information with respect to the information disclosure level of the first important information, the aggregation number of the first important information in the second important information is calculated. A computer program that statistically calculates the degree of aggregation.

Images